Xerox FreeFlow Core vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20252
3. 20262

Newest CVEs

• CVE-2026-2252

  XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)

  Xerox · FreeFlow Core

  High7.5
• CVE-2026-2251

  Path Traversal leading to Remote Code Execution (RCE)

  Xerox · FreeFlow Core

  Critical9.8
• CVE-2025-8356

  Path Traversal leading to RCE

  Xerox · FreeFlow Core

  Critical9.8
• CVE-2025-8355

  XXE leading to SSRF

  Xerox · FreeFlow Core

  High7.5
• CVE-2024-47559

  Authenticated RCE via Path Traversal

  Xerox · FreeFlow Core

  High7.6
• CVE-2024-47558

  Authenticated RCE via Path Traversal

  Xerox · FreeFlow Core

  High7.6
• CVE-2024-47557

  Pre-Auth RCE via Path Traversal

  Xerox · FreeFlow Core

  High8.3
• CVE-2024-47556

  Pre-Auth RCE via Path Traversal

  Xerox · FreeFlow Core

  High8.3
• CVE-2024-47555

  Missing Authentication - User & System Configuration

  Xerox · FreeFlow Core

  High8.3