PT-2026-20946 · Opentext · Opentext Xm Fax

Published 2026-02-19 · Updated 2026-02-27 · CVE-2025-8055

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenText XM Fax version 24.2

Description An issue exists in OpenText XM Fax that allows for Server-Side Request Forgery (SSRF). This could allow an attacker to perform blind SSRF to other systems accessible from the XM Fax server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2025-8055

Affected Products

Opentext Xm Fax

References · 6

• https://osv.dev/vulnerability/CVE-2025-8055 · Vendor Advisory
• https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0847038 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8055 · Security Note
• https://t.me/cveNotify/153601 · Telegram Post
• https://t.me/CVEtracker/45194 · Telegram Post
• https://t.me/cveNotify/152537 · Telegram Post