Vulnerability Database

300,214

Total vulnerabilities in the database

CVE-2025-8355

In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities. An attacker can craft malicious XML containing references to internal URLs, this results in a Server-Side Request Forgery (SSRF).

  • Published: Aug 8, 2025
  • Updated: Aug 15, 2025
  • CVE: CVE-2025-8355
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

No CWE or OWASP classifications available.

Software From Fixed in
xerox / freeflow_core 8.0.4 8.0.4.x