Vulnerabilidades do Xerox Freeflow Core

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Xerox Freeflow Core: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:xerox:freeflow_core

CVE-2026-2252 Alta · 7.5 CWE-611 27/02/2026

XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)

An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF) via crafted XML input containing malicious external entity references. This issue affects Xerox FreeFlow Core versions up to and including 8.0.7. Please consider upgrading to FreeFlow Core version 8.1.0 via the software available on - https://www.support.xerox.com/en-us/product/core/downloads

CVE-2026-2251 Crítica · 9.8 CWE-22 27/02/2026

Path Traversal leading to Remote Code Execution (RCE)

Improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Xerox FreeFlow Core allows unauthorized path traversal leading to RCE. This issue affects Xerox FreeFlow Core versions up to and including 8.0.7. Please consider upgrading to FreeFlow Core version 8.1.0 via the software available on - https://www.support.xerox.com/en-us/product/core/downloads https://www.support.xerox.com/en-us/product/core/downloads