Advisories · Technology
Xerox Workplace Suite.
Every CVE that names Xerox Workplace Suite among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Token stored in session storage
- Xerox Workplace Suite
- Information disclosure
- CVSS 6.7 Medium
Weak default folder permissions
- Xerox Workplace Suite
- Broken access control
- CVSS 5.3 Medium
Mail spoofing
- Xerox Workplace Suite
- CWE-345
- CVSS 6.5 Medium
Clear text secrets returned & Remote system secrets in clear text
- Xerox Workplace Suite
- Information disclosure
- CVSS 7.6 High
Flawed token generation implementation & Hard-coded key implementation
- Xerox Workplace Suite
- Hard-coded credentials
- CVSS 7.6 High
Arbitrary file upload, deletion and read through header manipulation
- Xerox Workplace Suite
- Path traversal
- Unrestricted file upload
- CVSS 7.5 High
API Security bypass through header manipulation
- Xerox Workplace Suite
- Authentication bypass