PT-2026-39614 · Unknown · Docuform Managed Print Service Client

Published 2026-05-11 · Updated 2026-05-11 · CVE-2025-65417

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions docuFORM Managed Print Service Client version 11.11c

Description The application is subject to a reflected cross-site scripting (XSS) attack, which occurs when an application includes untrusted data in a web page without proper validation, allowing an attacker to execute malicious scripts in the victim's browser. This issue is present on the login page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-65417

Affected Products

Docuform Managed Print Service Client

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-65417 · Security Note
• https://docuform.de · Note
• https://twitter.com/CVEnew/status/2053954536750920116 · Twitter Post
• https://gist.github.com/ZeroBreach-GmbH/906ec04806f62d61c65b1c90b0f36c4a · Note
• https://zerobreach.de · Note