Search
Find a vulnerability
Search criteria
2 vulnerabilities by OpenText, Inc
CVE-2025-15610 (GCVE-0-2025-15610)
Vulnerability from nvd – Published: 2026-04-15 16:31 – Updated: 2026-04-29 22:07
VLAI
EPSS
VEX
Summary
The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments where the remoting ports are accessible.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-502 - Deserialization of untrusted data
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| OpenText, Inc | RightFax |
Affected:
16.6 , ≤ 16.6 Update7136
(custom)
Affected: 20.2 , ≤ 20.2 Update5705 (custom) Affected: 21.2 , ≤ 21.2.1.2707 (custom) Affected: 22.2 , ≤ 22.2.0.1644 (custom) Affected: 23.4 , ≤ 26.4.0.1644 (custom) Affected: 24.4 , ≤ 24.4.0.1644 (custom) Affected: 25.4 , ≤ 25.4.0.1644 (custom) |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-15610",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-15T17:32:21.163911Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-15T17:32:31.254Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"platforms": [
"Windows",
"64 bit",
"32 bit"
],
"product": "RightFax",
"vendor": "OpenText, Inc",
"versions": [
{
"lessThanOrEqual": "16.6 Update7136",
"status": "affected",
"version": "16.6",
"versionType": "custom"
},
{
"lessThanOrEqual": "20.2 Update5705",
"status": "affected",
"version": "20.2",
"versionType": "custom"
},
{
"lessThanOrEqual": "21.2.1.2707",
"status": "affected",
"version": "21.2",
"versionType": "custom"
},
{
"lessThanOrEqual": "22.2.0.1644",
"status": "affected",
"version": "22.2",
"versionType": "custom"
},
{
"lessThanOrEqual": "26.4.0.1644",
"status": "affected",
"version": "23.4",
"versionType": "custom"
},
{
"lessThanOrEqual": "24.4.0.1644",
"status": "affected",
"version": "24.4",
"versionType": "custom"
},
{
"lessThanOrEqual": "25.4.0.1644",
"status": "affected",
"version": "25.4",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Harrison Neal"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments where the remoting ports are accessible."
}
],
"value": "The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments where the remoting ports are accessible."
}
],
"impacts": [
{
"capecId": "CAPEC-586",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-586 Object Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"description": "CWE-502 Deserialization of untrusted data",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-29T22:07:10.628Z",
"orgId": "f81092c5-7f14-476d-80dc-24857f90be84",
"shortName": "OpenText"
},
"references": [
{
"url": "https://support.opentext.com/csm?id=ot_kb_unauthenticated\u0026sysparm_article=KB0861863"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84",
"assignerShortName": "OpenText",
"cveId": "CVE-2025-15610",
"datePublished": "2026-04-15T16:31:53.959Z",
"dateReserved": "2026-03-16T14:20:32.991Z",
"dateUpdated": "2026-04-29T22:07:10.628Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-15610 (GCVE-0-2025-15610)
Vulnerability from cvelistv5 – Published: 2026-04-15 16:31 – Updated: 2026-04-29 22:07
VLAI
EPSS
VEX
Summary
The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments where the remoting ports are accessible.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-502 - Deserialization of untrusted data
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| OpenText, Inc | RightFax |
Affected:
16.6 , ≤ 16.6 Update7136
(custom)
Affected: 20.2 , ≤ 20.2 Update5705 (custom) Affected: 21.2 , ≤ 21.2.1.2707 (custom) Affected: 22.2 , ≤ 22.2.0.1644 (custom) Affected: 23.4 , ≤ 26.4.0.1644 (custom) Affected: 24.4 , ≤ 24.4.0.1644 (custom) Affected: 25.4 , ≤ 25.4.0.1644 (custom) |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-15610",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-15T17:32:21.163911Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-15T17:32:31.254Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"platforms": [
"Windows",
"64 bit",
"32 bit"
],
"product": "RightFax",
"vendor": "OpenText, Inc",
"versions": [
{
"lessThanOrEqual": "16.6 Update7136",
"status": "affected",
"version": "16.6",
"versionType": "custom"
},
{
"lessThanOrEqual": "20.2 Update5705",
"status": "affected",
"version": "20.2",
"versionType": "custom"
},
{
"lessThanOrEqual": "21.2.1.2707",
"status": "affected",
"version": "21.2",
"versionType": "custom"
},
{
"lessThanOrEqual": "22.2.0.1644",
"status": "affected",
"version": "22.2",
"versionType": "custom"
},
{
"lessThanOrEqual": "26.4.0.1644",
"status": "affected",
"version": "23.4",
"versionType": "custom"
},
{
"lessThanOrEqual": "24.4.0.1644",
"status": "affected",
"version": "24.4",
"versionType": "custom"
},
{
"lessThanOrEqual": "25.4.0.1644",
"status": "affected",
"version": "25.4",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Harrison Neal"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments where the remoting ports are accessible."
}
],
"value": "The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments where the remoting ports are accessible."
}
],
"impacts": [
{
"capecId": "CAPEC-586",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-586 Object Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"description": "CWE-502 Deserialization of untrusted data",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-29T22:07:10.628Z",
"orgId": "f81092c5-7f14-476d-80dc-24857f90be84",
"shortName": "OpenText"
},
"references": [
{
"url": "https://support.opentext.com/csm?id=ot_kb_unauthenticated\u0026sysparm_article=KB0861863"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84",
"assignerShortName": "OpenText",
"cveId": "CVE-2025-15610",
"datePublished": "2026-04-15T16:31:53.959Z",
"dateReserved": "2026-03-16T14:20:32.991Z",
"dateUpdated": "2026-04-29T22:07:10.628Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}