CVE-2025-65417
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
docuFORM Managed Print Service Client 11.11c is vulnerable to reflected cross-site scripting via the application's login page.
Risk Assessment
Potential execution of malicious script in a user's browser via the login page, which may lead to session or credential theft.
Recommendation
Update the client to a fixed version or implement input validation and encoding on the login page. Consider deploying security headers.
Other vulnerabilities in docuFORM Managed Print Service Client
See all- CVE-2025-65418High
docuFORM Managed Print Service Client version 11.11c is vulnerable to a directory traversal attack, allowing attackers to read arbitrary files via crafted URL.
- CVE-2025-65416Medium
docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pmupdate.php. An attacker could upload malicious files to the server.
- CVE-2025-65415Medium
docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the application's login page. An attacker can force a session identifier on the victim, which is then authenticated.
Original NVD description (English source)
docuFORM Managed Print Service Client 11.11c is vulnerable to a reflected cross site scripting attack via the login page of the application.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS