PT-2025-32365 · Xerox · Xerox Freeflow Core

Published

2025-08-08

·

Updated

2025-08-15

·

CVE-2025-8356

CVSS v3.1
9.8
VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions:

Xerox FreeFlow Core version 8.0.4

Description:

A Path Traversal vulnerability exists in Xerox FreeFlow Core version 8.0.4. This allows an attacker to access unauthorized files on the server, potentially leading to Remote Code Execution (RCE). Successful exploitation could allow an attacker to run arbitrary commands on the system.

Recommendations:

Update Xerox FreeFlow Core to a newer version that resolves this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Path traversal

Weakness Enumeration

Related Identifiers

CVE-2025-8356

Affected Products

Xerox Freeflow Core