PT-2025-32365 · Xerox · Xerox Freeflow Core

Jimi Sebree

·

Published

2025-08-08

·

Updated

2025-08-29

·

CVE-2025-8356

CVSS v3.1
9.8
VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Xerox FreeFlow Core version 8.0.4
Description A path traversal vulnerability exists in Xerox FreeFlow Core version 8.0.4, potentially allowing an attacker to access unauthorized files on the server. Successful exploitation of this issue can lead to Remote Code Execution (RCE), enabling the attacker to execute arbitrary commands on the system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Code Injection

Path traversal

Weakness Enumeration

CWE-94CWE-22

Related Identifiers

CVE-2025-8356

Affected Products

Xerox Freeflow Core