CVE-2025-65418
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
docuFORM Managed Print Service Client version 11.11c is vulnerable to a directory traversal attack, allowing attackers to read arbitrary files via crafted URL.
Risk Assessment
Exploitation of this vulnerability could lead to the disclosure of sensitive data, posing a significant security risk to the organization.
Recommendation
It is recommended to update to the latest version of the software to mitigate this vulnerability and to monitor logs for potential attack attempts.
Other vulnerabilities in docuFORM Managed Print Service Client 11.11c
See all- CVE-2025-65417Medium
docuFORM Managed Print Service Client 11.11c is vulnerable to reflected cross-site scripting via the application's login page.
- CVE-2025-65416Medium
docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pmupdate.php. An attacker could upload malicious files to the server.
- CVE-2025-65415Medium
docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the application's login page. An attacker can force a session identifier on the victim, which is then authenticated.
Original NVD description (English source)
docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowing attackers to read arbitrary files via crafted url.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS