Xerox Freeflow Core vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Xerox Freeflow Core: 2 record(s), with affected versions and fixes.
cpe:2.3:a:xerox:freeflow_core

CVE-2026-2252 High · 7.5 CWE-611 Feb 27, 2026

XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)

An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF) via crafted XML input containing malicious external entity references. This issue affects Xerox FreeFlow Core versions up to and including 8.0.7. Please consider upgrading to FreeFlow Core version 8.1.0 via the software available on - https://www.support.xerox.com/en-us/product/core/downloads

CVE-2026-2251 Critical · 9.8 CWE-22 Feb 27, 2026

Path Traversal leading to Remote Code Execution (RCE)

Improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Xerox FreeFlow Core allows unauthorized path traversal leading to RCE. This issue affects Xerox FreeFlow Core versions up to and including 8.0.7. Please consider upgrading to FreeFlow Core version 8.1.0 via the software available on - https://www.support.xerox.com/en-us/product/core/downloads https://www.support.xerox.com/en-us/product/core/downloads