Is CVE-2025-65417 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-65417 being exploited in the wild.

How severe is CVE-2025-65417?

Informational severity, with a CVSS score of 8.1, published 11 May 2026.

Which products and versions are affected?

docuForm Managed Print Service Client 11.11c.

Is there a fix for CVE-2025-65417?

A patch was published on 2025-11: Vendor published a fix Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2025-65417 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2025-65417?

Check whether you run docuForm Managed Print Service Client at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-65417: docuFORM Managed Print Service Client reflected XSS in login page

CVE-2025-65417 · Severity: info · CVSS 8.1 · Published 2026-05-11

docuFORM Managed Print Service Client, a tool used to manage corporate printing and scanning infrastructure, is vulnerable to a security flaw on its login page. An attacker can trick a user into clicking a malicious link, allowing the attacker to run unauthorized scripts in the user's browser. This could lead to the theft of login credentials, session hijacking, or unauthorized access to sensitive print management data.

Technologies: docuForm Managed Print Service Client. Vendors: docuForm.

Quick answers

Is CVE-2025-65417 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-65417 being exploited in the wild.
How severe is CVE-2025-65417?: Informational severity, with a CVSS score of 8.1, published 11 May 2026.
Which products and versions are affected?: docuForm Managed Print Service Client 11.11c.
Is there a fix for CVE-2025-65417?: A patch was published on 2025-11: Vendor published a fix Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-65417 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2025-65417?: Check whether you run docuForm Managed Print Service Client at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A reflected cross-site scripting (XSS) vulnerability exists in the login page of docuFORM Managed Print Service Client (also referred to as FSM Client) version 11.11c. The application fails to properly sanitize and encode user-supplied input before reflecting it in the HTTP response. A remote, unauthenticated attacker can exploit this by enticing a user to visit a specially crafted URL. Successful exploitation allows the execution of arbitrary JavaScript in the context of the victim's browser session, which can be used to steal session cookies (CWE-79). The vendor has reportedly released a fix as of November 2025.

Affected products

docuFORM Managed Print Service Client (FSM Client) 11.11c

Timeline

2025-10: other: Vulnerability reported to vendor
2025-11: patched: Vendor published a fix
2026-05-11: advisory: Public disclosure and CVE assignment

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.