PT-2025-32364 · Xerox · Xerox Freeflow Core

Published

2025-08-08

·

Updated

2025-08-29

·

CVE-2025-8355

CVSS v3.1
7.5
VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Xerox FreeFlow Core version 8.0.4
Description Improper handling of XML input allows injection of external entities, leading to a Server-Side Request Forgery (SSRF). An attacker can craft malicious XML containing references to internal URLs to exploit this issue.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2025-8355

Affected Products

Xerox Freeflow Core