XEROX vulnerabilities
23 published CVEs name XEROX among the affected products.
- Published CVEs
- 23
- Last 12 months
- 3
- Critical
- 4
- Known exploited
- 0
Critical 4High 12Medium 7Low 0Not scored 0
CVEs per yearBy the year they were published
- 20191
- 20211
- 20246
- 202512
- 20263
Newest CVEs
- CVE-2026-2252
XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)
Xerox · FreeFlow Core
High7.5 - CVE-2026-2251
Path Traversal leading to Remote Code Execution (RCE)
Xerox · FreeFlow Core
Critical9.8 - CVE-2026-1769
Stored XSS on Xerox CentreWare Web 7.0.6
Xerox · CentreWare
Medium5.3 - CVE-2025-8356
Path Traversal leading to RCE
Xerox · FreeFlow Core
Critical9.8 - CVE-2025-8355
XXE leading to SSRF
Xerox · FreeFlow Core
High7.5 - CVE-2025-1984
Local Privilege Escalation on Xerox® Desktop Print Experience® v8.5
Xerox · Xerox® Desktop Print Experience
Medium5.2 - CVE-2024-12511
SMB/FTP Address Book Scan Pass-back attack
Xerox · Versalink B400
High7.6 - CVE-2024-12510
LDAP Authentication Sever Pass-back attack
Xerox · Versalink B400
Medium6.7 - CVE-2024-55931
Token stored in session storage
Xerox · Xerox Workplace Suite
Medium6.5 - CVE-2024-55930
Weak default folder permissions
Xerox · Xerox Workplace Suite
Medium6.7
Products with the most CVEs
Most common weaknesses
- CWE-22 Path traversal7
- CWE-306 Missing authentication for a critical function2
- CWE-611 XML external entity (XXE)2
- CWE-78 OS command injection2
- CWE-798 Hard-coded credentials2
- CWE-259 1
- CWE-276 Incorrect default permissions1
- CWE-287 Improper authentication1
- CWE-290 1
- CWE-312 Cleartext storage of sensitive information1