How many CVEs does Xerox have?

Xerox has 124 published CVE records since 2001, including 15 in the last two years.

How many Xerox CVEs are in CISA KEV?

None of Xerox's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which Xerox products have the most CVEs?

The Xerox products with the most published CVEs are WorkCentre, workcentre 245, workcentre 255, workcentre 265, workcentre 232.

What are the most common weakness types in Xerox CVEs?

Xerox's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-312 (Cleartext Storage of Sensitive Information).

Are there public exploits for Xerox vulnerabilities?

Yes — 6 of Xerox's CVEs have a known public exploit.

How many critical Xerox vulnerabilities are there?

Xerox has 33 critical and 39 high-severity CVEs.

What is the average severity of Xerox CVEs?

The average CVSS base score across Xerox's scored CVEs is 7.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

124 CVEs

Xerox Vulnerabilities

Name: Xerox vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Xerox.

124

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

6

Public exploits

PoC or exploit code

7.3

Avg CVSS

2001–2026

Overview

Xerox has 124 published CVE records since 2001, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 6 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Xerox products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Xerox's vulnerability posture, as a share of its 124 published CVEs.

Average CVSS: 7.3
Critical / high: 58%
Actively exploited (KEV): 0%
Public exploit available: 5%
Patch available: 39%

Severity and exploitation

How the CVSS severity of Xerox's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical33

High39

Medium51

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Xerox's CVEs are currently listed in CISA's KEV catalog.

Public exploits

6

6 of Xerox's CVEs have a known public exploit available.

Most affected products

The Xerox products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Xerox CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Xerox CVE records.

Disclosure activity by year

How many Xerox CVEs were published each year.

2019

10

2020

12

2021

11

2022

5

2023

2

2024

6

2025

12

2026

3

Latest Xerox CVEs

The most recently disclosed vulnerabilities affecting Xerox.

XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)
CWE-611
High · CVSS 7.5
EPSS 0.3%2026-02-27
Path Traversal leading to Remote Code Execution (RCE)
CWE-22
Critical · CVSS 9.8
EPSS 0.4%2026-02-27
Stored XSS on Xerox CentreWare Web 7.0.6
CWE-79
Medium · CVSS 5.4
EPSS 0.1%2026-02-06
Path Traversal leading to RCE
CWE-22
Critical · CVSS 9.8
EPSS 14.8%2025-08-08
XXE leading to SSRF
CWE-611
High · CVSS 7.5
EPSS 7.0%2025-08-08
Local Privilege Escalation on Xerox® Desktop Print Experience® v8.5
CWE-428
Medium · CVSS 5.2
EPSS 0.1%2025-03-12
SMB/FTP Address Book Scan Pass-back attack
CWE-306
High · CVSS 7.6
EPSS 0.6%2025-02-03
Medium vulnerability · 2025-02-03
CWE-287
Medium · CVSS 6.7
EPSS 0.9%2025-02-03
Medium vulnerability · 2025-01-27
CWE-922
Medium · CVSS 6.5
EPSS 0.3%2025-01-27
Critical vulnerability · 2025-01-23
CWE-276
Critical · CVSS 9.8
EPSS 0.3%2025-01-23
Mail spoofing
CWE-345
Medium · CVSS 5.3
EPSS 0.2%2025-01-23
Clear text secrets returned & Remote system secrets in clear text
CWE-312
High · CVSS 7.5
EPSS 0.1%2025-01-23

Track new Xerox CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Xerox CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

WSO2125 CVEs 10web125 CVEs Mambo125 CVEs Philips124 CVEs Exiv2124 CVEs libming124 CVEs F-Secure123 CVEs getgrav123 CVEs

Browse all vendors

Frequently asked questions

Common questions about Xerox vulnerabilities.

How many CVEs does Xerox have?: Xerox has 124 published CVE records since 2001, including 15 in the last two years.
How many Xerox CVEs are in CISA KEV?: None of Xerox's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which Xerox products have the most CVEs?: The Xerox products with the most published CVEs are WorkCentre, workcentre 245, workcentre 255, workcentre 265, workcentre 232.
What are the most common weakness types in Xerox CVEs?: Xerox's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-312 (Cleartext Storage of Sensitive Information).
Are there public exploits for Xerox vulnerabilities?: Yes — 6 of Xerox's CVEs have a known public exploit.
How many critical Xerox vulnerabilities are there?: Xerox has 33 critical and 39 high-severity CVEs.
What is the average severity of Xerox CVEs?: The average CVSS base score across Xerox's scored CVEs is 7.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Xerox vulnerabilities

Monitor new Xerox vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing