Login Request a demo
XE
Vendor
Xerox
223 products with CVEs on record
756
CVEs
0
On KEV
0
New 30D
Products
WO
Workcentre
Xerox
–
20 CVEs0 on KEV0 new
W2
Workcentre 232
Xerox
–
12 CVEs0 on KEV0 new
W2
Workcentre 238
Xerox
–
12 CVEs0 on KEV0 new
W2
Workcentre 245
Xerox
–
12 CVEs0 on KEV0 new
W2
Workcentre 255
Xerox
–
12 CVEs0 on KEV0 new
W2
Workcentre 265
Xerox
–
12 CVEs0 on KEV0 new
W2
Workcentre 275
Xerox
–
12 CVEs0 on KEV0 new
AC
Altalink C8035 Firmware
Xerox
9.8
9 CVEs0 on KEV0 new
FC
FreeFlow Core
Xerox
9.8
9 CVEs0 on KEV0 new
AB
Altalink B8045 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
AB
Altalink B8055 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
AB
Altalink B8065 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
AB
Altalink B8075 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
AB
Altalink B8090 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
AC
Altalink C8030 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
AC
Altalink C8045 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
AC
Altalink C8055 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
AC
Altalink C8070 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
P3
Phaser 3320 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W3
Workcentre 3655 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W3
Workcentre 3655i Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W6
Workcentre 6655 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W6
Workcentre 6655i Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W7
Workcentre 7220 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W7
Workcentre 7225 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W7
Workcentre 7830 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W7
Workcentre 7835 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W7
Workcentre 7845 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W7
Workcentre 7855 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W7
Workcentre 7970 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W7
Workcentre 7970i Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
WE
Workcentre Ec7836 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
WE
Workcentre Ec7856 Firmware
Xerox
9.8
8 CVEs0 on KEV0 new
W5
Workcentre 5865 Firmware
Xerox
9.8
7 CVEs0 on KEV0 new
W5
Workcentre 5865i Firmware
Xerox
9.8
7 CVEs0 on KEV0 new
W5
Workcentre 5875 Firmware
Xerox
9.8
7 CVEs0 on KEV0 new
W5
Workcentre 5875i Firmware
Xerox
9.8
7 CVEs0 on KEV0 new
W5
Workcentre 5890 Firmware
Xerox
9.8
7 CVEs0 on KEV0 new
W5
Workcentre 5890i Firmware
Xerox
9.8
7 CVEs0 on KEV0 new
W7
Workcentre 7225i Firmware
Xerox
9.8
7 CVEs0 on KEV0 new
WS
Workplace Suite
Xerox
9.8
7 CVEs0 on KEV0 new
XW
Xerox Workplace Suite
Xerox
9.8
7 CVEs0 on KEV0 new
W5
Workcentre 5845 Firmware
Xerox
9.8
6 CVEs0 on KEV0 new
W7
Workcentre 7220i Firmware
Xerox
9.8
6 CVEs0 on KEV0 new
W7
Workcentre 7830i Firmware
Xerox
9.8
6 CVEs0 on KEV0 new
W7
Workcentre 7835i Firmware
Xerox
9.8
6 CVEs0 on KEV0 new
W7
Workcentre 7845i Firmware
Xerox
9.8
6 CVEs0 on KEV0 new
W7
Workcentre 7855i Firmware
Xerox
9.8
6 CVEs0 on KEV0 new
W2
Workcentre 2128
Xerox
–
5 CVEs0 on KEV0 new
W2
Workcentre 2636
Xerox
–
5 CVEs0 on KEV0 new
W3
Workcentre 3545
Xerox
–
5 CVEs0 on KEV0 new
W5
Workcentre 5900 Firmware
Xerox
9.8
5 CVEs0 on KEV0 new
W5
Workcentre 5900i Firmware
Xerox
9.8
5 CVEs0 on KEV0 new
DC
Document Centre 265
Xerox
–
4 CVEs0 on KEV0 new
DC
Document Centre 332
Xerox
–
4 CVEs0 on KEV0 new
DC
Document Centre 340
Xerox
–
4 CVEs0 on KEV0 new
DC
Document Centre 420
Xerox
–
4 CVEs0 on KEV0 new
DC
Document Centre 490
Xerox
–
4 CVEs0 on KEV0 new
DC
Document Centre 535
Xerox
–
4 CVEs0 on KEV0 new
DC
Document Centre 555
Xerox
–
4 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-2252
FC
FreeFlow Core
Xerox
7.5
0%
Feb 27XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)
CVE-2026-2251
FC
FreeFlow Core
Xerox
9.8
0%
Feb 27Path Traversal leading to Remote Code Execution (RCE)
CVE-2026-1769
CE
CentreWare
Xerox
5.4
0%
Feb 6Stored XSS on Xerox CentreWare Web 7.0.6
CVE-2025-8356
FC
FreeFlow Core
Xerox
9.8
19%
Aug 8Path Traversal leading to RCE
CVE-2025-8355
FC
FreeFlow Core
Xerox
7.5
9%
Aug 8XXE leading to SSRF
CVE-2025-1984
XD
Xerox® Desktop Print Experience
Xerox
5.2
0%
Mar 12Local Privilege Escalation on Xerox® Desktop Print Experience® v8.5
CVE-2024-12511
VB
Versalink B7025/B7030/B7035
Xerox
7.6
1%
Feb 3SMB/FTP Address Book Scan Pass-back attack
CVE-2024-12510
VC
Versalink C405
Xerox
6.7
1%
Feb 3LDAP Authentication Sever Pass-back attack
CVE-2024-55931
XW
Xerox Workplace Suite
Xerox
6.5
0%
Jan 27Token stored in session storage
CVE-2024-55930
XW
Xerox Workplace Suite
Xerox
9.8
0%
Jan 23Weak default folder permissions
CVE-2024-55929
XW
Xerox Workplace Suite
Xerox
5.3
0%
Jan 23Mail spoofing
CVE-2024-55928
XW
Xerox Workplace Suite
Xerox
7.5
0%
Jan 23Clear text secrets returned & Remote system secrets in clear text
CVE-2024-55927
XW
Xerox Workplace Suite
Xerox
7.5
0%
Jan 23Flawed token generation implementation & Hard-coded key implementation
CVE-2024-55926
XW
Xerox Workplace Suite
Xerox
9.8
0%
Jan 23Arbitrary file upload, deletion and read through header manipulation
CVE-2024-55925
XW
Xerox Workplace Suite
Xerox
7.5
0%
Jan 23API Security bypass through header manipulation
CVE-2024-6333
XE
Xerox® EC8036 / EC8056
Xerox
7.2
1%
Oct 17Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products
CVE-2024-47559
FC
FreeFlow Core
Xerox
8.8
0%
Oct 7Authenticated RCE via Path Traversal
CVE-2024-47558
FC
FreeFlow Core
Xerox
8.8
0%
Oct 7Authenticated RCE via Path Traversal
CVE-2024-47557
FC
FreeFlow Core
Xerox
9.8
1%
Oct 7Pre-Auth RCE via Path Traversal
CVE-2024-47556
FC
FreeFlow Core
Xerox
9.8
1%
Oct 7Pre-Auth RCE via Path Traversal
CVE-2024-47555
FC
FreeFlow Core
Xerox
8.3
0%
Oct 7Missing Authentication - User & System Configuration
CVE-2023-46327
VC
Versalink C7130 Firmware
Xerox
5.9
0%
Nov 2Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp
CVE-2022-45897
W3
Workcentre 3550 Firmware
Xerox
6.5
0%
Jan 31On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server settings and can obtain the stored cleartext credentials associated with those…
CVE-2022-26572
C8
Colorqube 8580 Firmware
Xerox
7.5
1%
Apr 4Xerox ColorQube 8580 was discovered to contain an access control issue which allows attackers to print, view the status, and obtain sensitive information
CVE-2021-37354
P4
Phaser 4622 Firmware
Xerox
9.8
1%
Feb 15Xerox Phaser 4622 v35.013.01.000 was discovered to contain a buffer overflow in the function sub_3226AC via the TIMEZONE variable
CVE-2022-23321
XU
Xmpie Ustore
Xerox
4.8
1%
Feb 10A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when editing users in the XMPie UStore application on version…
CVE-2022-23320
XU
Xmpie Ustore
Xerox
7.5
2%
Feb 7XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries
CVE-2022-23968
VF
Versalink Firmware
Xerox
7.5
2%
Jan 26Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST…
CVE-2019-10881
AC
Altalink C8070 Firmware
Xerox
9.8
1%
Apr 13Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded…
CVE-2021-28672
VB
Versalink B405 Firmware
Xerox
9.8
2%
Mar 29Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before…
CVE-2021-28671
VC
Versalink C600 Firmware
Xerox
9.8
3%
Mar 29Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before…
CVE-2021-28673
VB
Versalink B7035 Firmware
Xerox
9.8
2%
Mar 29Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLink B400 before 37.61.23 and 37.59.01 (Bridge), B405 before…
CVE-2021-28669
AB
Altalink B8090 Firmware
Xerox
7.5
1%
Mar 29Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to…
CVE-2021-28668
AC
Altalink C8035 Firmware
Xerox
9.8
1%
Mar 29Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 has several SQL…
CVE-2021-28670
AB
Altalink B8045 Firmware
Xerox
9.1
1%
Mar 29Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow…
CVE-2019-18630
AC
Altalink C8070 Firmware
Xerox
7.5
1%
Mar 4On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, portions of the drive…
CVE-2019-18629
AB
Altalink B8045 Firmware
Xerox
8.1
1%
Mar 4Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute…
CVE-2019-18628
AC
Altalink C8030 Firmware
Xerox
4.9
1%
Mar 4Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow a user with…
CVE-2020-36201
W7
Workcentre 7855i Firmware
Xerox
7.5
1%
Jan 26An issue was discovered in certain Xerox WorkCentre products
CVE-2020-26162
WE
Workcentre Ec7836 Firmware
Xerox
6.1
1%
Oct 9Xerox WorkCentre EC7836 before 073.050.059.25300 and EC7856 before 073.020.059.25300 devices allow XSS via Description pages
CVE-2016-11061
W7
Workcentre 7200i Firmware
Xerox
9.8
2%
Apr 29Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters…
CVE-2019-13172
P3
Phaser 3320 Firmware
Xerox
9.8
3%
Mar 13Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Authentication Cookie of the web application that would allow…
CVE-2019-13171
P3
Phaser 3320 Firmware
Xerox
9.8
3%
Mar 13Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in the Google Cloud Print implementation that…
CVE-2019-13170
P3
Phaser 3320 Firmware
Xerox
6.5
0%
Mar 13Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement any mechanism to avoid CSRF attacks
CVE-2019-13169
P3
Phaser 3320 Firmware
Xerox
9.8
3%
Mar 13Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Content-Type HTTP Header of the web application that would…
CVE-2019-13168
P3
Phaser 3320 Firmware
Xerox
9.8
3%
Mar 13Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the attributes parser of the IPP service
CVE-2019-13167
P3
Phaser 3320 Firmware
Xerox
6.1
1%
Mar 13Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and other printers
CVE-2019-13166
P3
Phaser 3320 Firmware
Xerox
7.5
1%
Mar 13Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement account lockout
CVE-2019-13165
P3
Phaser 3320 Firmware
Xerox
9.8
3%
Mar 13Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the request parser of the IPP service
CVE-2020-9330
W6
Workcentre 6655i Firmware
Xerox
8.8
1%
Feb 21Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changing the LDAP connector IP address
CVE-2013-6362
W7
Workcentre 7545 Firmware
Xerox
9.8
1%
Feb 13Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts
CVE-2019-19832
AC
Altalink C8035 Firmware
Xerox
8.8
1%
Dec 18Xerox AltaLink C8035 printers allow CSRF
CVE-2019-17184
AF
Atlalink Firmware
Xerox
9.8
2%
Oct 4Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software before 101.00x.089.22600 allow an attacker to gain privileges
CVE-2018-15530
C8
Colorqube 8580 Firmware
Xerox
6.1
1%
May 13Cross-site scripting (XSS) in the web interface of the Xerox ColorQube 8580 allows remote persistent injection of custom HTML / JavaScript code
CVE-2019-10880
C8
Colorqube 8900 Firmware
Xerox
9.8
8%
Apr 12Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" request (OS Command Injection…
CVE-2018-20767
W3
Workcentre 3655 Firmware
Xerox
8.8
2%
Feb 10An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…
CVE-2018-20768
W3
Workcentre 3655i Firmware
Xerox
9.8
1%
Feb 10An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…
CVE-2018-20770
W3
Workcentre 3655i Firmware
Xerox
9.8
1%
Feb 10An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…
CVE-2018-20771
W6
Workcentre 6655 Firmware
Xerox
9.8
3%
Feb 10An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…
CVE-2018-20769
W3
Workcentre 3655i Firmware
Xerox
7.5
1%
Feb 10An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05…