WS
Product
Workplace Suite
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 2Low 0
Watch
Add Workplace Suite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-55930 | 9.8 | Jan 23 | Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files Affected: before 5.6.701.9 |
| CVE-2024-55926 | 9.8 | Jan 23 | A vulnerability found in Xerox Workplace Suite allows arbitrary file read, upload, and deletion on the server through crafted header manipulation Affected: before 5.6.701.9 |
| CVE-2024-55928 | 7.5 | Jan 23 | Xerox Workplace Suite exposes sensitive secrets in clear text, both locally and remotely Affected: before 5.6.701.9 |
| CVE-2024-55927 | 7.5 | Jan 23 | A vulnerability in Xerox Workplace Suite arises from flawed token generation and the use of hard-coded keys Affected: before 5.6.701.9 |
| CVE-2024-55925 | 7.5 | Jan 23 | In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header Affected: before 5.6.701.9 |
| CVE-2024-55931 | 6.5 | Jan 27 | Xerox Workplace Suite stores tokens in session storage, which may expose them to potential access if a user's session is compromised. The patch for this vulnerability will be… Affected: before 5.6.701.9 |
| CVE-2024-55929 | 5.3 | Jan 23 | A mail spoofing vulnerability in Xerox Workplace Suite allows attackers to forge email headers, making it appear as though messages are sent from trusted sources Affected: before 5.6.701.9 |
Showing 7