Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-2252

XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Xerox

Description

An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF) via crafted XML input containing malicious external entity references. This issue affects Xerox FreeFlow Core versions up to and including 8.0.7.  Please consider upgrading to FreeFlow Core version 8.1.0 via the software available on -  https://www.support.xerox.com/en-us/product/core/downloads

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Xerox FreeFlow Core

Default version status: unaffected

  • 0 to ≤ 8.0.7affected

References