CVE-2025-15610

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-15610", "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "state": "PUBLISHED", "assignerShortName": "OpenText", "dateReserved": "2026-03-16T14:20:32.991Z", "datePublished": "2026-04-15T16:31:53.959Z", "dateUpdated": "2026-04-29T22:07:10.628Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "OpenText", "dateUpdated": "2026-04-29T22:07:10.628Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-502", "description": "CWE-502 Deserialization of untrusted data", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-586", "descriptions": [{"lang": "en", "value": "CAPEC-586 Object Injection"}]}], "affected": [{"vendor": "OpenText, Inc", "product": "RightFax", "platforms": ["Windows", "64 bit", "32 bit"], "versions": [{"status": "affected", "version": "16.6", "lessThanOrEqual": "16.6 Update7136", "versionType": "custom"}, {"status": "affected", "version": "20.2", "lessThanOrEqual": "20.2 Update5705", "versionType": "custom"}, {"status": "affected", "version": "21.2", "lessThanOrEqual": "21.2.1.2707", "versionType": "custom"}, {"status": "affected", "version": "22.2", "lessThanOrEqual": "22.2.0.1644", "versionType": "custom"}, {"status": "affected", "version": "23.4", "lessThanOrEqual": "26.4.0.1644", "versionType": "custom"}, {"status": "affected", "version": "24.4", "lessThanOrEqual": "24.4.0.1644", "versionType": "custom"}, {"status": "affected", "version": "25.4", "lessThanOrEqual": "25.4.0.1644", "versionType": "custom"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments where the remoting ports are accessible.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments where the remoting ports are accessible."}]}], "references": [{"url": "https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0861863"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "CRITICAL", "baseScore": 9.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "credits": [{"lang": "en", "value": "Harrison Neal", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.1"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-15T17:32:21.163911Z", "id": "CVE-2025-15610", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-15T17:32:31.254Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-15610", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-15T17:32:21.163911Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-15T17:32:25.478Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Harrison Neal"}], "impacts": [{"capecId": "CAPEC-586", "descriptions": [{"lang": "en", "value": "CAPEC-586 Object Injection"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "OpenText, Inc", "product": "RightFax", "versions": [{"status": "affected", "version": "16.6", "versionType": "custom", "lessThanOrEqual": "16.6 Update7136"}, {"status": "affected", "version": "20.2", "versionType": "custom", "lessThanOrEqual": "20.2 Update5705"}, {"status": "affected", "version": "21.2", "versionType": "custom", "lessThanOrEqual": "21.2.1.2707"}, {"status": "affected", "version": "22.2", "versionType": "custom", "lessThanOrEqual": "22.2.0.1644"}, {"status": "affected", "version": "23.4", "versionType": "custom", "lessThanOrEqual": "26.4.0.1644"}, {"status": "affected", "version": "24.4", "versionType": "custom", "lessThanOrEqual": "24.4.0.1644"}, {"status": "affected", "version": "25.4", "versionType": "custom", "lessThanOrEqual": "25.4.0.1644"}], "platforms": ["Windows", "64 bit", "32 bit"], "defaultStatus": "unknown"}], "references": [{"url": "https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0861863"}], "x_generator": {"engine": "Vulnogram 1.0.1"}, "descriptions": [{"lang": "en", "value": "The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments where the remoting ports are accessible.", "supportingMedia": [{"type": "text/html", "value": "The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments where the remoting ports are accessible.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-502", "description": "CWE-502 Deserialization of untrusted data"}]}], "providerMetadata": {"orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "OpenText", "dateUpdated": "2026-04-29T22:07:10.628Z"}}}, "cveMetadata": {"cveId": "CVE-2025-15610", "state": "PUBLISHED", "dateUpdated": "2026-04-29T22:07:10.628Z", "dateReserved": "2026-03-16T14:20:32.991Z", "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "datePublished": "2026-04-15T16:31:53.959Z", "assignerShortName": "OpenText"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "platforms": ["Windows", "64 bit", "32 bit"], "product": "RightFax", "vendor": "OpenText, Inc", "versions": [{"lessThanOrEqual": "16.6 Update7136", "status": "affected", "version": "16.6", "versionType": "custom"}, {"lessThanOrEqual": "20.2 Update5705", "status": "affected", "version": "20.2", "versionType": "custom"}, {"lessThanOrEqual": "21.2.1.2707", "status": "affected", "version": "21.2", "versionType": "custom"}, {"lessThanOrEqual": "22.2.0.1644", "status": "affected", "version": "22.2", "versionType": "custom"}, {"lessThanOrEqual": "26.4.0.1644", "status": "affected", "version": "23.4", "versionType": "custom"}, {"lessThanOrEqual": "24.4.0.1644", "status": "affected", "version": "24.4", "versionType": "custom"}, {"lessThanOrEqual": "25.4.0.1644", "status": "affected", "version": "25.4", "versionType": "custom"}]}], "source": "security@opentext.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments where the remoting ports are accessible."}, {"lang": "es", "value": "El framework .NET Remoting utilizado por OpenText Fax (RightFax) incluye vulnerabilidades de seguridad conocidas que podr\u00edan ser explotadas si el servicio est\u00e1 expuesto en entornos donde los puertos de remoting son accesibles."}], "id": "CVE-2025-15610", "lastModified": "2026-10-07T09:10:00.160", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security@opentext.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-15610", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-15T17:32:21.163911Z", "version": "2.0.3"}}]}, "published": "2026-04-15T17:17:00.020", "references": [{"source": "security@opentext.com", "url": "https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0861863"}], "sourceIdentifier": "security@opentext.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-502"}], "source": "security@opentext.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["windows", "64_bit", "32_bit"], "status": "affected", "versions": {"scheme": "generic", "value": "[16.6,16.6 Update7136]"}}, {"platform": ["windows", "64_bit", "32_bit"], "status": "affected", "versions": {"scheme": "generic", "value": "[20.2,20.2 Update5705]"}}, {"platform": ["windows", "64_bit", "32_bit"], "status": "affected", "versions": {"scheme": "generic", "value": "[21.2,21.2.1.2678]"}}, {"platform": ["windows", "64_bit", "32_bit"], "status": "affected", "versions": {"scheme": "generic", "value": "[22.2,22.2.2.347]"}}, {"platform": ["windows", "64_bit", "32_bit"], "status": "affected", "versions": {"scheme": "generic", "value": "[23.4,23.4.2.853]"}}, {"platform": ["windows", "64_bit", "32_bit"], "status": "affected", "versions": {"scheme": "generic", "value": "[24.4,24.4.2.853]"}}, {"platform": ["windows", "64_bit", "32_bit"], "status": "affected", "versions": {"scheme": "generic", "value": "[25.4,25.4.2.347]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "RightFax", "source": "cna", "vendor": "OpenText, Inc"}, "product": "rightfax", "vendor": "opentext"}], "created": "2026-04-15T21:02:21.522357+00:00", "updated": "2026-04-30T14:15:40.623641+00:00", "vendors": ["opentext", "opentext$PRODUCT$rightfax"]}