CVE-2025-1984

MEDIUM EPSS 2.9%

Published Mar 12, 20251y ago · Modified Jun 17, 20261w ago

5.2 CVSS 3.1

Medium

Published Mar 12, 2025 1y ago

Last Modified Jun 17, 2026 1w ago

Description

Xerox Desktop Print Experience application contains a Local Privilege Escalation (LPE) vulnerability, which allows a low-privileged user to gain SYSTEM-level access.

CVSS Details

Base Score

5.2

Exploitability

2.0

Impact

2.7

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Changed

Confidentiality Low

Integrity Low

Availability None

Threat Intelligence

EPSS Exploit Probability

2.9% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-428

References 1

securitydocs.business.xerox.com https://securitydocs.business.xerox.com/wp-content/uploads/2025/03/Xerox-Security-Bulletin-XRX25-006-for-Xerox-Desktop-Print-Experience.pdf

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.