CVE-2025-8055 - CVE House
Back to Database
Status published Medium CVE-2025-8055

SSRF vulnerability have been discovered in OpenText™ XM Fax

Vulnerability Description

Server-Side Request Forgery (SSRF) vulnerability in OpenText™ XM Fax allows Server Side Request Forgery.  The vulnerability could allow an attacker to perform blind SSRF to other systems accessible from the XM Fax server. This issue affects XM Fax: 24.2.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-8055

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Inetum Hacking team, leaded in this research by Ángel M Sequeira and with the help of @cr33pb0y

Affected Vendor

OpenText™

View all reports →

Affected Software

XM Fax
Vulnerable Versions:
24.2

Timeline

Official Publish: February 19th, 2026
Last Modified: February 23rd, 2026
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)