Login Request a demo
XE
Vendor
Xerox
184 products with CVEs on record
692
CVEs
0
On KEV
0
New 30D
Products
WO
Workcentre
Xerox
–
20 CVEs0 on KEV0 new
W2
Workcentre 232
Xerox
–
12 CVEs0 on KEV0 new
W2
Workcentre 238
Xerox
–
12 CVEs0 on KEV0 new
W2
Workcentre 245
Xerox
–
12 CVEs0 on KEV0 new
W2
Workcentre 255
Xerox
–
12 CVEs0 on KEV0 new
W2
Workcentre 265
Xerox
–
12 CVEs0 on KEV0 new
W2
Workcentre 275
Xerox
–
12 CVEs0 on KEV0 new
AC
Altalink C8035 Firmware
Xerox
9.8
9 CVEs0 on KEV0 new
AB
Altalink B8045 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
AB
Altalink B8055 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
AB
Altalink B8065 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
AB
Altalink B8075 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
AB
Altalink B8090 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
AC
Altalink C8030 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
AC
Altalink C8045 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
AC
Altalink C8055 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
AC
Altalink C8070 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
FC
FreeFlow Core
Xerox
9.8
8 CVEs0 on KEV0 new
P3
Phaser 3320 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W3
Workcentre 3655 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W3
Workcentre 3655i Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W6
Workcentre 6655 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W6
Workcentre 6655i Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W7
Workcentre 7220 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W7
Workcentre 7225 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W7
Workcentre 7830 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W7
Workcentre 7835 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W7
Workcentre 7845 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W7
Workcentre 7855 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W7
Workcentre 7970 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W7
Workcentre 7970i Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
WE
Workcentre Ec7836 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
WE
Workcentre Ec7856 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W5
Workcentre 5865 Firmware
Xerox
9.8
7 CVEs0 on KEV0 new
W5
Workcentre 5865i Firmware
Xerox
9.8
7 CVEs0 on KEV0 new
W5
Workcentre 5875 Firmware
Xerox
9.8
7 CVEs0 on KEV0 new
W5
Workcentre 5875i Firmware
Xerox
9.8
7 CVEs0 on KEV0 new
W5
Workcentre 5890 Firmware
Xerox
9.8
7 CVEs0 on KEV0 new
W5
Workcentre 5890i Firmware
Xerox
9.8
7 CVEs0 on KEV0 new
W7
Workcentre 7225i Firmware
Xerox
9.8
7 CVEs0 on KEV0 new
WS
Workplace Suite
Xerox
9.8
7 CVEs0 on KEV0 new
W5
Workcentre 5845 Firmware
Xerox
9.8
6 CVEs0 on KEV0 new
W7
Workcentre 7220i Firmware
Xerox
9.8
6 CVEs0 on KEV0 new
W7
Workcentre 7830i Firmware
Xerox
9.8
6 CVEs0 on KEV0 new
W7
Workcentre 7835i Firmware
Xerox
9.8
6 CVEs0 on KEV0 new
W7
Workcentre 7845i Firmware
Xerox
9.8
6 CVEs0 on KEV0 new
W7
Workcentre 7855i Firmware
Xerox
9.8
6 CVEs0 on KEV0 new
W2
Workcentre 2128
Xerox
–
5 CVEs0 on KEV0 new
W2
Workcentre 2636
Xerox
–
5 CVEs0 on KEV0 new
W3
Workcentre 3545
Xerox
–
5 CVEs0 on KEV0 new
W5
Workcentre 5900 Firmware
Xerox
9.8
5 CVEs0 on KEV0 new
W5
Workcentre 5900i Firmware
Xerox
9.8
5 CVEs0 on KEV0 new
DC
Document Centre 265
Xerox
–
4 CVEs0 on KEV0 new
DC
Document Centre 332
Xerox
–
4 CVEs0 on KEV0 new
DC
Document Centre 340
Xerox
–
4 CVEs0 on KEV0 new
DC
Document Centre 420
Xerox
–
4 CVEs0 on KEV0 new
DC
Document Centre 490
Xerox
–
4 CVEs0 on KEV0 new
DC
Document Centre 535
Xerox
–
4 CVEs0 on KEV0 new
DC
Document Centre 555
Xerox
–
4 CVEs0 on KEV0 new
D6
Docutech 6110
Xerox
–
4 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-2252
FC
FreeFlow Core
Xerox
7.5
0%
Feb 27XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)
CVE-2026-2251
FC
FreeFlow Core
Xerox
9.8
0%
Feb 27Path Traversal leading to Remote Code Execution (RCE)
CVE-2026-1769
CE
CentreWare
Xerox
5.4
0%
Feb 6Stored XSS on Xerox CentreWare Web 7.0.6
CVE-2025-8356
FC
Freeflow Core
Xerox
9.8
19%
Aug 8In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unauthorized files on the server
CVE-2025-8355
FC
Freeflow Core
Xerox
7.5
9%
Aug 8In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities
CVE-2024-55931
WS
Workplace Suite
Xerox
6.5
0%
Jan 27Xerox Workplace Suite stores tokens in session storage, which may expose them to potential access if a user's session is compromised.  The patch for this vulnerability will be…
CVE-2024-55930
WS
Workplace Suite
Xerox
9.8
0%
Jan 23Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files
CVE-2024-55929
WS
Workplace Suite
Xerox
5.3
0%
Jan 23A mail spoofing vulnerability in Xerox Workplace Suite allows attackers to forge email headers, making it appear as though messages are sent from trusted sources
CVE-2024-55928
WS
Workplace Suite
Xerox
7.5
0%
Jan 23Xerox Workplace Suite exposes sensitive secrets in clear text, both locally and remotely
CVE-2024-55927
WS
Workplace Suite
Xerox
7.5
0%
Jan 23A vulnerability in Xerox Workplace Suite arises from flawed token generation and the use of hard-coded keys
CVE-2024-55926
WS
Workplace Suite
Xerox
9.8
0%
Jan 23A vulnerability found in Xerox Workplace Suite allows arbitrary file read, upload, and deletion on the server through crafted header manipulation
CVE-2024-55925
WS
Workplace Suite
Xerox
7.5
0%
Jan 23In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header
CVE-2024-47559
FC
Freeflow Core
Xerox
8.8
0%
Oct 7Authenticated RCE via Path Traversal
CVE-2024-47558
FC
Freeflow Core
Xerox
8.8
0%
Oct 7Authenticated RCE via Path Traversal
CVE-2024-47557
FC
Freeflow Core
Xerox
9.8
1%
Oct 7Pre-Auth RCE via Path Traversal
CVE-2024-47556
FC
Freeflow Core
Xerox
9.8
1%
Oct 7Pre-Auth RCE via Path Traversal
CVE-2023-46327
VC
Versalink C7025 Firmware
Xerox
5.9
0%
Nov 2Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp
CVE-2022-45897
W3
Workcentre 3550 Firmware
Xerox
6.5
0%
Jan 31On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server settings and can obtain the stored cleartext credentials associated with those…
CVE-2022-26572
C8
Colorqube 8580 Firmware
Xerox
7.5
1%
Apr 4Xerox ColorQube 8580 was discovered to contain an access control issue which allows attackers to print, view the status, and obtain sensitive information
CVE-2021-37354
P4
Phaser 4622 Firmware
Xerox
9.8
1%
Feb 15Xerox Phaser 4622 v35.013.01.000 was discovered to contain a buffer overflow in the function sub_3226AC via the TIMEZONE variable
CVE-2022-23321
XU
Xmpie Ustore
Xerox
4.8
1%
Feb 10A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when editing users in the XMPie UStore application on version…
CVE-2022-23320
XU
Xmpie Ustore
Xerox
7.5
2%
Feb 7XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries
CVE-2022-23968
VF
Versalink Firmware
Xerox
7.5
2%
Jan 26Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST…
CVE-2019-10881
AC
Altalink C8070 Firmware
Xerox
9.8
1%
Apr 13Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded…
CVE-2021-28672
VC
Versalink C600 Firmware
Xerox
9.8
2%
Mar 29Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before…
CVE-2021-28671
VC
Versalink C400 Firmware
Xerox
9.8
3%
Mar 29Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before…
CVE-2021-28673
VC
Versalink C405 Firmware
Xerox
9.8
2%
Mar 29Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLink B400 before 37.61.23 and 37.59.01 (Bridge), B405 before…
CVE-2021-28669
AB
Altalink B8045 Firmware
Xerox
7.5
1%
Mar 29Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to…
CVE-2021-28668
AC
Altalink C8070 Firmware
Xerox
9.8
1%
Mar 29Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 has several SQL…
CVE-2021-28670
AB
Altalink B8045 Firmware
Xerox
9.1
1%
Mar 29Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow…
CVE-2019-18630
AC
Altalink C8070 Firmware
Xerox
7.5
1%
Mar 4On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, portions of the drive…
CVE-2019-18629
AC
Altalink C8055 Firmware
Xerox
8.1
1%
Mar 4Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute…
CVE-2019-18628
AC
Altalink C8070 Firmware
Xerox
4.9
1%
Mar 4Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow a user with…
CVE-2020-36201
W7
Workcentre 7835 Firmware
Xerox
7.5
1%
Jan 26An issue was discovered in certain Xerox WorkCentre products
CVE-2020-26162
WE
Workcentre Ec7836 Firmware
Xerox
6.1
1%
Oct 9Xerox WorkCentre EC7836 before 073.050.059.25300 and EC7856 before 073.020.059.25300 devices allow XSS via Description pages
CVE-2016-11061
W5
Workcentre 5875 Firmware
Xerox
9.8
2%
Apr 29Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters…
CVE-2019-13172
P3
Phaser 3320 Firmware
Xerox
9.8
3%
Mar 13Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Authentication Cookie of the web application that would allow…
CVE-2019-13171
P3
Phaser 3320 Firmware
Xerox
9.8
3%
Mar 13Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in the Google Cloud Print implementation that…
CVE-2019-13170
P3
Phaser 3320 Firmware
Xerox
6.5
0%
Mar 13Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement any mechanism to avoid CSRF attacks
CVE-2019-13169
P3
Phaser 3320 Firmware
Xerox
9.8
3%
Mar 13Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Content-Type HTTP Header of the web application that would…
CVE-2019-13168
P3
Phaser 3320 Firmware
Xerox
9.8
3%
Mar 13Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the attributes parser of the IPP service
CVE-2019-13167
P3
Phaser 3320 Firmware
Xerox
6.1
1%
Mar 13Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and other printers
CVE-2019-13166
P3
Phaser 3320 Firmware
Xerox
7.5
1%
Mar 13Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement account lockout
CVE-2019-13165
P3
Phaser 3320 Firmware
Xerox
9.8
3%
Mar 13Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the request parser of the IPP service
CVE-2020-9330
W3
Workcentre 3655 Firmware
Xerox
8.8
1%
Feb 21Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changing the LDAP connector IP address
CVE-2013-6362
C9
Colorqube 9201 Firmware
Xerox
9.8
1%
Feb 13Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts
CVE-2019-19832
AC
Altalink C8035 Firmware
Xerox
8.8
1%
Dec 18Xerox AltaLink C8035 printers allow CSRF
CVE-2019-17184
AF
Atlalink Firmware
Xerox
9.8
2%
Oct 4Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software before 101.00x.089.22600 allow an attacker to gain privileges
CVE-2018-15530
C8
Colorqube 8580 Firmware
Xerox
6.1
1%
May 13Cross-site scripting (XSS) in the web interface of the Xerox ColorQube 8580 allows remote persistent injection of custom HTML / JavaScript code
CVE-2019-10880
C8
Colorqube 8700 Firmware
Xerox
9.8
8%
Apr 12Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" request (OS Command Injection…
CVE-2018-20768
W3
Workcentre 3655i Firmware
Xerox
9.8
1%
Feb 10An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…
CVE-2018-20771
W3
Workcentre 3655i Firmware
Xerox
9.8
3%
Feb 10An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…
CVE-2018-20770
W5
Workcentre 5865i Firmware
Xerox
9.8
1%
Feb 10An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…
CVE-2018-20769
W3
Workcentre 3655i Firmware
Xerox
7.5
1%
Feb 10An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…
CVE-2018-20767
W7
Workcentre 7830 Firmware
Xerox
8.8
2%
Feb 10An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…
CVE-2018-17172
AB
Altalink B8065 Firmware
Xerox
9.8
2%
Jan 3The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before…
CVE-2014-3138
DO
Docushare
Xerox
–
3%
May 2SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1 Update 2 before Hotfix 3 allows remote authenticated users…
CVE-2013-0415
FP
Freeflow Print Server
Xerox
–
0%
Jan 17Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Bind/Postinstall…
CVE-2013-0407
FP
Freeflow Print Server
Xerox
–
0%
Jan 17Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/DTrace Framework
CVE-2012-0569
FP
Freeflow Print Server
Xerox
–
0%
Jan 17Unspecified vulnerability Oracle Sun Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Install/smpatch