CVE-2025-65415
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the application's login page. An attacker can force a session identifier on the victim, which is then authenticated.
Risk Assessment
An attacker can hijack an authenticated user's session and gain access to print management functions. This may lead to unauthorized actions on behalf of the victim.
Recommendation
Upgrade docuFORM Managed Print Service Client to a patched version. Implement session identifier regeneration after login.
Other vulnerabilities in docuFORM Managed Print Service Client
See all- CVE-2025-65418High
docuFORM Managed Print Service Client version 11.11c is vulnerable to a directory traversal attack, allowing attackers to read arbitrary files via crafted URL.
- CVE-2025-65417Medium
docuFORM Managed Print Service Client 11.11c is vulnerable to reflected cross-site scripting via the application's login page.
- CVE-2025-65416Medium
docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pmupdate.php. An attacker could upload malicious files to the server.
Original NVD description (English source)
docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the login page of the application.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS