Skip to content
OpenAdvisories

Vendor

Xerox

23 known vulnerabilities.

Products

FreeFlow Core 9 Xerox Workplace Suite 7 AltaLink B8045/B8055/B8065/B8075/B8090 2 AltaLink C8030/C8035/C8045/C8055/C8070 2 WorkCentre 3655 2 WorkCentre 5845/5855/5865/5875/5890 2 WorkCentre 5945/5955 2 WorkCentre 6655 2 WorkCentre 7220/7225 2 WorkCentre 7830/7835/7845/7855 2 WorkCentre 7970 2 WorkCentre EC7836/EC7856 2 ColorQube 9301/9302/9303 2 ColorQube 8700/8900 2 WorkCentre 6400 2 Phaser 6700 2 Phaser 7800 2 WorkCentre 5735/5740/5745/5755/5765/5775/5790 2 WorkCentre 7525/7530/7535/7545/7556 2 WorkCentre 7755/7765/7775 2 Versalink B400 2 Versalink B405 2 Versalink C400 2 Versalink C405 2 Versalink B600/B610 2 Versalink B605/B615 2 Versalink C500/C600 2 Versalink C505/C605 2 Versalink C7000 2 Versalink C7020/C7025/C7030 2 Versalink B7025/B7030/B7035 2 Versalink B7125/B7130/B7135 2 Versalink C7120/C7125/C7130 2 Versalink C8000/C9000 2 Versalink C8000W 2 Phaser 6510 2 WorkCentre 6515 2 AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807 1 Xerox® EC8036 / EC8056 1 Xerox® EC8036 / EC8056 - Common Criteria (June 2022) 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-1769 Public exploit

    Stored XSS on Xerox CentreWare Web 7.0.6

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6.  Consider upgrading Xerox® CentreWare Web® to v7.2.2.25 vi…

    Xerox CentreWare
  • Medium 5.2
    CVE-2025-1984

    Local Privilege Escalation on Xerox® Desktop Print Experience® v8.5

    Xerox Desktop Print Experience application contains a Local Privilege Escalation (LPE) vulnerability, which allows a low-privileged user to gain SYSTEM-level access.

    Xerox Xerox® Desktop Print Experience
  • Medium 6.7
    CVE-2024-12510

    LDAP Authentication Sever Pass-back attack

    If LDAP settings are accessed, authentication could be redirected to another server, potentially exposing credentials. This requires admin access and an active LDAP setup.

    Xerox Versalink C7020/C7025/C7030 Versalink C400 Versalink B7125/B7130/B7135
  • Medium 6.5
    CVE-2024-55931

    Token stored in session storage

    Xerox Workplace Suite stores tokens in session storage, which may expose them to potential access if a user's session is compromised.  The patch for this vulnerability will be included in a future release of Workplace Suite, and customers will be notified thr…

    Xerox Xerox Workplace Suite
  • Medium 6.7
    CVE-2024-55930

    Weak default folder permissions

    Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files

    Xerox Xerox Workplace Suite
  • Medium 5.3
    CVE-2024-55929

    Mail spoofing

    A mail spoofing vulnerability in Xerox Workplace Suite allows attackers to forge email headers, making it appear as though messages are sent from trusted sources.

    Xerox Xerox Workplace Suite
  • Medium 6.5
    CVE-2024-55928

    Clear text secrets returned & Remote system secrets in clear text

    Xerox Workplace Suite exposes sensitive secrets in clear text, both locally and remotely. This vulnerability allows attackers to intercept or access secrets without encryption

    Xerox Xerox Workplace Suite