← Back to CVE Explorer

CVE-2025-65416

Full vulnerability record from the local CVENow database.

Description

docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pmupdate.php.

Severity
MEDIUM
CVSS score
6.3 (v3.1)
Vulnerability status
Deferred
Source identifier
Published
2026-05-11 16:17:29.057000
Last modified
2026-10-26 21:10:00.170000
View original CVE JSON
{
  "id": "CVE-2025-65416",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-11T16:17:29.057",
  "lastModified": "2026-10-26T21:10:00.170",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pmupdate.php."
    },
    {
      "lang": "es",
      "value": "docuFORM Managed Print Service Cliente 11.11c es vulnerable a la carga arbitraria de archivos a través de pmupdate.PHP."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
          "baseScore": 6.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-11T19:28:00.775439Z",
          "id": "CVE-2025-65416",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-434"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://ZeroBreach.de",
      "source": "[email protected]"
    },
    {
      "url": "https://gist.github.com/ZeroBreach-GmbH/f94cad5b37f718d1b1cfee6ca0fe666b",
      "source": "[email protected]"
    },
    {
      "url": "https://www.docuform.de/",
      "source": "[email protected]"
    }
  ]
}