Advisories · Technology
Xerox FreeFlow Core.
Every CVE that names Xerox FreeFlow Core among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)
- Xerox FreeFlow Core
- XML external entities (XXE)
- Server-side request forgery (SSRF)
- CVSS 9.8 CriticalCritical · CVSS 9+
Path Traversal leading to Remote Code Execution (RCE)
- Xerox FreeFlow Core
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Path Traversal leading to RCE
- Xerox FreeFlow Core
- Path traversal
- Code injection
- CVSS 7.5 High
XXE leading to SSRF
- Xerox FreeFlow Core
- XML external entities (XXE)
- CVSS 7.6 High
Authenticated RCE via Path Traversal
- Xerox FreeFlow Core
- Path traversal
- CVSS 7.6 High
Authenticated RCE via Path Traversal
- Xerox FreeFlow Core
- Path traversal
- CVSS 8.3 High
Pre-Auth RCE via Path Traversal
- Xerox FreeFlow Core
- Path traversal
- CVSS 8.3 High
Pre-Auth RCE via Path Traversal
- Xerox FreeFlow Core
- Path traversal
- CVSS 8.3 High
Missing Authentication - User & System Configuration
- Xerox FreeFlow Core
- Authentication bypass