CVE-2025-65415 identifies a session fixation vulnerability in docuFORM Managed Print Service Client 11.11c. The issue occurs via the application's login page, where an attacker can set or fixate a session identifier prior to user authentication. This flaw can allow an attacker to hijack a valid user session if the victim authenticates using the attacker-supplied session ID. No CVSS score or detailed technical mitigation information is available, and no patch or official fix has been documented.

Successful exploitation of this vulnerability could allow an attacker to impersonate a legitimate user by hijacking their authenticated session. This could lead to unauthorized access to the application and potentially sensitive print service functions. However, there is no evidence of active exploitation in the wild, and the exact impact depends on the privileges of the compromised user session.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should consider implementing compensating controls such as monitoring for suspicious session activity and enforcing session management best practices if possible. No vendor advisory or official remediation information is currently provided.