Skip to content
NewA calmer, faster ZeroHour
Vulnerability2

CVE-2025-8355

CVSS 3.1
7.5 high
EPSS
7%p94
Published
·
Modified
Analyze CVE-2025-8355 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities. An attacker can craft malicious XML containing references to internal URLs, this results in a Server-Side Request Forgery (SSRF).

Vendors
xerox
Products
freeflow core
Weakness
CWE-611
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NVD CVE.org GitHub PoCs EPSS (7.3%)

In the news

3 stories