Skip to content
Xerox vulnerabilities
Products
Show 126 moreShow less
Newest
-
xerox freeflow core
XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)
CVE-2026-2252
7.5 High
-
xerox freeflow core
Path Traversal leading to Remote Code Execution (RCE)
CVE-2026-2251
9.8 Critical
-
xerox centreware, centreware web +1 more
Stored XSS on Xerox CentreWare Web 7.0.6
CVE-2026-1769
Public exploit
5.3 Medium
-
xerox freeflow core
Path Traversal leading to RCE
CVE-2025-8356
EPSS 19.4%
9.8 Critical
-
xerox freeflow core
XXE leading to SSRF
CVE-2025-8355
7.5 High
-
xerox xerox® desktop print experience
Local Privilege Escalation on Xerox® Desktop Print Experience® v8.5
CVE-2025-1984
5.2 Medium
-
xerox phaser 6510, versalink b400, versalink b405 +14 more +16 more
SMB/FTP Address Book Scan Pass-back attack
CVE-2024-12511
7.6 High
-
xerox phaser 6510, versalink b400, versalink b405 +14 more +16 more
LDAP Authentication Sever Pass-back attack
CVE-2024-12510
6.7 Medium
-
xerox workplace suite
Token stored in session storage
CVE-2024-55931
6.5 Medium
-
xerox workplace suite
Weak default folder permissions
CVE-2024-55930
6.7 Medium
-
xerox workplace suite
Mail spoofing
CVE-2024-55929
5.3 Medium
-
xerox workplace suite
Clear text secrets returned & Remote system secrets in clear text
CVE-2024-55928
6.5 Medium
-
xerox workplace suite
Flawed token generation implementation & Hard-coded key implementation
CVE-2024-55927
7.6 High
-
xerox workplace suite
Arbitrary file upload, deletion and read through header manipulation
CVE-2024-55926
7.6 High
-
xerox workplace suite
API Security bypass through header manipulation
CVE-2024-55925
7.5 High
-
xerox altalink firmware, altalink® b8045 / b8055 / b8065 / b8075 / b8090 | c8030 / c8035 / c8045 / c8055 / c807, altalink® c8130 / c8135 / c8145 / c8155 / c8170 | b8145 / b8155 / b8170 common criteria certified (aug 2023) +18 more +20 more
Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products
CVE-2024-6333
Public exploit
7.2 High
-
xerox freeflow core
Authenticated RCE via Path Traversal
CVE-2024-47559
7.6 High
-
xerox freeflow core
Authenticated RCE via Path Traversal
CVE-2024-47558
7.6 High
-
xerox freeflow core
Pre-Auth RCE via Path Traversal
CVE-2024-47557
8.3 High
-
xerox freeflow core
Pre-Auth RCE via Path Traversal
CVE-2024-47556
8.3 High
-
xerox freeflow core
Missing Authentication - User & System Configuration
CVE-2024-47555
8.3 High
-
fujifilm apeos 2560 firmware, apeos 2560 gk firmware, apeos 3060 firmware +249 more +251 more
Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox...
CVE-2023-46327
5.9 Medium
-
xerox workcentre 3550 firmware
On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server...
CVE-2022-45897
6.5 Medium
-
xerox colorqube 8580 firmware
Xerox ColorQube 8580 was discovered to contain an access control issue which allows attackers to...
CVE-2022-26572
7.5 High
-
xerox phaser 4622 firmware
Xerox Phaser 4622 v35.013.01.000 was discovered to contain a buffer overflow in the function...
CVE-2021-37354
9.8 Critical
-
xerox xmpie ustore
A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the...
CVE-2022-23321
4.8 Medium
-
xerox xmpie ustore
XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries....
CVE-2022-23320
7.5 High
-
xerox versalink firmware
Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers...
CVE-2022-23968
7.5 High
-
xerox altalink b8045/b8055/b8065/b8075/b8090, altalink c8030/c8035/c8045/c8055/c8070, altalink b8045 firmware +25 more +27 more
Default hidden Privileged Account Vulnerability in multiple XEROX devices
CVE-2019-10881
9.4 Critical
-
xerox phaser 6510 firmware, versalink b400 firmware, versalink b405 firmware +21 more +23 more
Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65...
CVE-2021-28671
9.8 Critical
-
xerox phaser 6510 firmware, versalink b400 firmware, versalink b405 firmware +21 more +23 more
Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65...
CVE-2021-28672
9.8 Critical
-
xerox altalink b8045 firmware, altalink b8055 firmware, altalink b8065 firmware +7 more +9 more
Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055...
CVE-2021-28668
9.8 Critical
-
xerox altalink b8045 firmware, altalink b8055 firmware, altalink b8065 firmware +7 more +9 more
Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055...
CVE-2021-28669
7.5 High
-
xerox phaser 6510 firmware, versalink b400 firmware, versalink b405 firmware +20 more +22 more
Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65...
CVE-2021-28673
9.8 Critical
-
xerox altalink b8045 firmware, altalink b8055 firmware, altalink b8065 firmware +7 more +9 more
Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045...
CVE-2021-28670
9.1 Critical
-
xerox altalink b8045 firmware, altalink b8055 firmware, altalink b8065 firmware +7 more +9 more
On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction...
CVE-2019-18630
7.5 High
-
xerox altalink b8045 firmware, altalink b8055 firmware, altalink b8065 firmware +7 more +9 more
Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction...
CVE-2019-18629
8.1 High
-
xerox altalink b8045 firmware, altalink b8055 firmware, altalink b8065 firmware +7 more +9 more
Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction...
CVE-2019-18628
4.9 Medium
-
xerox workcentre 3655 firmware, workcentre 3655i firmware, workcentre 5865 firmware +27 more +29 more
An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt...
CVE-2020-36201
7.5 High
-
xerox workcentre ec7836 firmware, workcentre ec7856 firmware +1 more
Xerox WorkCentre EC7836 before 073.050.059.25300 and EC7856 before 073.020.059.25300 devices...
CVE-2020-26162
6.1 Medium
-
xerox workcentre 3655 firmware, workcentre 3655i firmware, workcentre 5865 firmware +22 more +24 more
Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi,...
CVE-2016-11061
9.8 Critical
-
xerox phaser 3320 firmware
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow...
CVE-2019-13165
9.8 Critical
-
xerox phaser 3320 firmware
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement account lockout....
CVE-2019-13166
7.5 High
-
xerox phaser 3320 firmware
Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser...
CVE-2019-13167
6.1 Medium
-
xerox phaser 3320 firmware
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow...
CVE-2019-13168
9.8 Critical
-
xerox phaser 3320 firmware
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow...
CVE-2019-13169
9.8 Critical
-
xerox phaser 3320 firmware
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement any mechanism to...
CVE-2019-13170
6.5 Medium
-
xerox phaser 3320 firmware
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack...
CVE-2019-13171
9.8 Critical
-
xerox phaser 3320 firmware
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow...
CVE-2019-13172
9.8 Critical
-
xerox workcentre 3655 firmware, workcentre 3655i firmware, workcentre 5845 firmware +15 more +17 more
Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or...
CVE-2020-9330
8.8 High
- Show olderLoading…