OpenText™ Vulnerabilities and Affected Products
Vulnerabilities associated with XM Fax.
Products
Clear product- Vertica5 vulnerabilities
- Operations Bridge Manager4 vulnerabilities
- Directory Services3 vulnerabilities
- Exceed Turbo X3 vulnerabilities
- Web Site Management Server3 vulnerabilities
- Asset Management X (AMX)2 vulnerabilities
- Filr2 vulnerabilities
- Network Node Manager i (NNMi)2 vulnerabilities
- Service Management Automation X (SMAX)2 vulnerabilities
- Service Manager2 vulnerabilities
- XM Fax2 vulnerabilities
- AccuRev1 vulnerability
- ALM Octane Management1 vulnerability
- ALM Octane.1 vulnerability
- Application Lifecycle Management (ALM),Quality Center1 vulnerability
- Carbonite Safe Server Backup1 vulnerability
- Content Management (Extended ECM)1 vulnerability
- CX-E Voice1 vulnerability
- Digital Asset Management.1 vulnerability
- Documentum™ Server1 vulnerability
- GroupWise1 vulnerability
- Hybrid Cloud Management X (HCMX)1 vulnerability
- Operations Agent1 vulnerability
- Operations Bridge Suite (Containerized)1 vulnerability
- Solutions Business Manager (SBM)1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-8054HIGH | Path Traversal vulnerability have been discovered in OpenText™ XM Fax.Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText™ XM Fax allows Path Traversal. The vulnerability could allow an attacker to arbitrarily disclose content of files on the local filesystem. This issue affects XM Fax: 24.2. CWE-22Feb 19, 2026 | CVSS7.1v4.0 | EPSS0.309% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-8055MEDIUM | SSRF vulnerability have been discovered in OpenText™ XM FaxServer-Side Request Forgery (SSRF) vulnerability in OpenText™ XM Fax allows Server Side Request Forgery. The vulnerability could allow an attacker to perform blind SSRF to other systems accessible from the XM Fax server. This issue affects XM Fax: 24.2. CWE-918Feb 19, 2026 | CVSS5.3v4.0 | EPSS0.163% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |