How many xerox FreeFlow Core CVEs are in CISA KEV?

None of xerox FreeFlow Core's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for xerox FreeFlow Core vulnerabilities?

Yes — 1 of xerox FreeFlow Core's CVEs have a known public exploit.

Which versions of xerox FreeFlow Core are affected?

12 distinct xerox FreeFlow Core versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in xerox FreeFlow Core CVEs?

xerox FreeFlow Core's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-306 (Missing Authentication for Critical Function).

How many critical xerox FreeFlow Core vulnerabilities are there?

xerox FreeFlow Core has 4 critical and 5 high-severity CVEs.

What is the average severity of xerox FreeFlow Core CVEs?

The average CVSS base score across xerox FreeFlow Core's scored CVEs is 8.9.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

xerox

9 CVEs

xerox FreeFlow Core Vulnerabilities

Name: xerox FreeFlow Core vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for FreeFlow Core by xerox.

9

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

8.9

Avg CVSS

2024–2026

Last updated February 27, 2026

Overview

xerox FreeFlow Core has 9 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting xerox FreeFlow Core, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of xerox FreeFlow Core's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High5

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of xerox FreeFlow Core's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of xerox FreeFlow Core's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every xerox FreeFlow Core version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

7.0.0 <= v < 7.0.115 CVEs
7.0.x <= v < 7.0.115 CVEs
< 8.0.52 CVEs
< 8.1.02 CVEs
<= 8.0.72 CVEs
7.0 <= v < 7.0.112 CVEs
7.0 <= v <= 7.02 CVEs
8.0.4 <= v <= 8.0.42 CVEs

Fixed in

7.0.115 CVEs
> 8.0.72 CVEs
8.0.52 CVEs
8.1.02 CVEs

Find a version

9 CVEs

Sort

XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)
CVE-2026-2252
Patch
CWE-611
High · CVSS 7.5
EPSS 0.3% (18th pct)2026-02-27
Path Traversal leading to Remote Code Execution (RCE)
CVE-2026-2251
Patch
CWE-22
Critical · CVSS 9.8
EPSS 0.4% (32th pct)2026-02-27
Path Traversal leading to RCE
CVE-2025-8356
Public exploit
Patch
CWE-22
Critical · CVSS 9.8
EPSS 14.8% (96th pct)2025-08-08
XXE leading to SSRF
CVE-2025-8355
Patch
CWE-611
High · CVSS 7.5
EPSS 7.0% (93th pct)2025-08-08
Authenticated RCE via Path Traversal
CVE-2024-47559
Patch
CWE-22
High · CVSS 8.8
EPSS 0.5% (40th pct)2024-10-07
High vulnerability · 2024-10-07
CVE-2024-47558
Patch
CWE-22
High · CVSS 8.8
EPSS 0.5% (40th pct)2024-10-07
Critical vulnerability · 2024-10-07
CVE-2024-47557
Patch
CWE-22
Critical · CVSS 9.8
EPSS 0.5% (41th pct)2024-10-07
Critical vulnerability · 2024-10-07
CVE-2024-47556
Patch
CWE-22
Critical · CVSS 9.8
EPSS 0.5% (41th pct)2024-10-07
High vulnerability · 2024-10-07
CVE-2024-47555
Patch
CWE-306
High · CVSS 8.3
EPSS 0.2% (14th pct)2024-10-07

Common weakness types

The CWE weakness categories most often found in xerox FreeFlow Core CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many xerox FreeFlow Core CVEs were published each year.

2024

5

2025

2

2026

2

Other xerox products

Browse vulnerabilities for other products by xerox.

workcentre21 CVEs workcentre 23212 CVEs workcentre 23812 CVEs workcentre 24512 CVEs workcentre 25512 CVEs workcentre 26512 CVEs workcentre 27512 CVEs workcentre 365510 CVEs

All xerox vulnerabilities

Frequently asked questions

Common questions about xerox FreeFlow Core vulnerabilities.

How many CVEs does xerox FreeFlow Core have?: xerox FreeFlow Core has 9 published CVE records since 2024.
How many xerox FreeFlow Core CVEs are in CISA KEV?: None of xerox FreeFlow Core's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for xerox FreeFlow Core vulnerabilities?: Yes — 1 of xerox FreeFlow Core's CVEs have a known public exploit.
Which versions of xerox FreeFlow Core are affected?: 12 distinct xerox FreeFlow Core versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in xerox FreeFlow Core CVEs?: xerox FreeFlow Core's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-306 (Missing Authentication for Critical Function).
How many critical xerox FreeFlow Core vulnerabilities are there?: xerox FreeFlow Core has 4 critical and 5 high-severity CVEs.
What is the average severity of xerox FreeFlow Core CVEs?: The average CVSS base score across xerox FreeFlow Core's scored CVEs is 8.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track xerox FreeFlow Core vulnerabilities

Monitor new xerox FreeFlow Core vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing