CVE-2025-8054 - CVE House
Back to Database
Status published High CVE-2025-8054

Path Traversal vulnerability have been discovered in OpenText™ XM Fax.

Vulnerability Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText™ XM Fax allows Path Traversal.  The vulnerability could allow an attacker to arbitrarily disclose content of files on the local filesystem. This issue affects XM Fax: 24.2.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-8054

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Inetum Hacking team, leaded in this research by Ángel M Sequeira and with the help of @cr33pb0y

References

More from OpenText™

View All →
CVE-2025-9208
Stored-XSS vulnerability discovered in OpenText WSM Management Server.
High 7.5
CVE-2025-9120
RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup.
High 8.6
CVE-2025-8055
SSRF vulnerability have been discovered in OpenText™ XM Fax
Medium 5.3
CVE-2025-3476
Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability...
Critical 9.4
CVE-2025-3272
Incorrect user authorization vulnerability has been identified in Open Text Operations Bridge Manager.
Medium 6.7

Affected Vendor

OpenText™

View all reports →

Affected Software

XM Fax
Vulnerable Versions:
24.2

Timeline

Official Publish: February 19th, 2026
Last Modified: February 23rd, 2026
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-22

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1565.001 Stored Data Manipulation
Impact