Path Traversal Vulnerability in OpenText XM Fax Product
CVE-2025-8054

7.1HIGH

Key Information:

Vendor

Opentext™

Status
Xm Fax
Vendor
CVE Published:
19 February 2026

What is CVE-2025-8054?

A vulnerability in OpenText™ XM Fax allows an attacker to exploit improper limitations of a pathname, potentially disclosing sensitive file content from the local filesystem. This flaw impacts version 24.2 of XM Fax and necessitates timely remediation to safeguard against unauthorized access to files.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

XM Fax 24.2

References

https://support.opentext.com/csm?id=ot_kb_unauthenticated...

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Inetum Hacking team, leaded in this research by Ángel M Sequeira and with the help of @cr33pb0y
JSON
.