CVE-2025-8356
Critical · 9.8CVSS
9.8
EPSS
19.1%
Published
Aug 8, 2025
CISA due date
—
The record
In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unauthorized files on the server. This can lead to Remote Code Execution (RCE), allowing the attacker to run arbitrary commands on the system.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|