TI-2024-36984 CVE-2024-55930 · GHSA-xq9p-h64g-x8mc
Weak default folder permissions
Priority MEDIUM 43
Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files
Vulnerabilities
6 records
TI-2024-36983 CVE-2024-55929 · GHSA-m9g8-46v9-pjp2
Mail spoofing
Priority LOW 23
A mail spoofing vulnerability in Xerox Workplace Suite allows attackers to forge email headers, making it appear as though messages are sent from trusted sources.
TI-2024-36982 CVE-2024-55928 · GHSA-qqmj-rrh7-547q
Clear text secrets returned & Remote system secrets in clear text
Priority LOW 34
Xerox Workplace Suite exposes sensitive secrets in clear text, both locally and remotely.
TI-2024-36981 CVE-2024-55927 · GHSA-q8mj-2j9f-gw99
Flawed token generation implementation & Hard-coded key implementation
Priority LOW 33
A vulnerability in Xerox Workplace Suite arises from flawed token generation and the use of hard-coded keys.
TI-2024-36980 CVE-2024-55926 · GHSA-99jw-x78w-3hcm
Arbitrary file upload, deletion and read through header manipulation
Priority MEDIUM 42
A vulnerability found in Xerox Workplace Suite allows arbitrary file read, upload, and deletion on the server through crafted header manipulation.
TI-2024-36979 CVE-2024-55925 · GHSA-54pf-9qmv-m7pj
API Security bypass through header manipulation
Priority LOW 33
In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header.