TI-2025-07651 CVE-2025-8356 · GHSA-6rpm-hqp2-mf48
Path Traversal leading to RCE
Priority HIGH 82
In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unauthorized files on the server.
Xerox
Records124All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical33CVSS 9.0–10.0
CVSS high39CVSS 7.0–8.9
Exploited now
Xerox records in CISA KEVNo Xerox vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records in Freeflow Core · all components
TI-2025-07650 CVE-2025-8355 · GHSA-6c2v-98pf-9vgr
XXE leading to SSRF
Priority MEDIUM 50
In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities.
TI-2026-01898 CVE-2026-2251 · GHSA-cg57-mvgj-rxvr
Path Traversal leading to Remote Code Execution (RCE)
Priority MEDIUM 49
Improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Xerox FreeFlow Core allows unauthorized path traversal leading to RCE.
TI-2024-31844 CVE-2024-47557 · GHSA-w844-jc94-9fpw
Pre-Auth RCE via Path Traversal
Priority MEDIUM 43
Pre-Auth RCE via Path Traversal
TI-2024-31843 CVE-2024-47556 · GHSA-8rfp-v855-gr3w
Pre-Auth RCE via Path Traversal
Priority MEDIUM 43
Pre-Auth RCE via Path Traversal
TI-2024-31846 CVE-2024-47559 · GHSA-q2rv-rxjh-hjrw
Authenticated RCE via Path Traversal
Priority MEDIUM 41
Authenticated RCE via Path Traversal
TI-2024-31845 CVE-2024-47558 · GHSA-xcfw-562c-6qr6
Authenticated RCE via Path Traversal
Priority MEDIUM 41
Authenticated RCE via Path Traversal
TI-2026-01899 CVE-2026-2252 · GHSA-cfm2-f46f-rc3g
XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)
Priority LOW 33
An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF) via crafted XML input containing malicious external entity references.