PatchTheCVEworkplace suite vulnerabilities and fixes
Recent CVEs affecting workplace suite, with upgrade or downgrade steps. 7 tracked.
Also searched as: workplacesuite.
workplace suite has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2025-01-27. Highest priority: CVE-2024-55925 (score 39/100).
- CVE-2024-55931 MEDIUM 6.5 UPGRADE Xerox Workplace Suite stores tokens in session storage, which may expose them to potential access if a user's
- CVE-2024-55930 MEDIUM 6.7 UPGRADE Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or
- CVE-2024-55929 MEDIUM 5.3 UPGRADE A mail spoofing vulnerability in Xerox Workplace Suite allows attackers to forge email headers, making it appe
- CVE-2024-55928 MEDIUM 6.5 UPGRADE Xerox Workplace Suite exposes sensitive secrets in clear text, both locally and remotely
- CVE-2024-55927 HIGH 7.6 UPGRADE A vulnerability in Xerox Workplace Suite arises from flawed token generation and the use of hard-coded keys
- CVE-2024-55926 HIGH 7.6 UPGRADE A vulnerability found in Xerox Workplace Suite allows arbitrary file read, upload, and deletion on the server
- CVE-2024-55925 HIGH 7.5 UPGRADE In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header
FAQ
How do I fix workplace suite vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is workplace suite being exploited right now?
None of the tracked workplace suite CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which workplace suite CVE should I patch first?
CVE-2024-55925 currently ranks highest (39/100): In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header.