Reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor
Published May 12, 2025
5.1
MEDIUMCVSS 4.0
EPSS 0.69%
Description
Reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].
Affected products
- Vendor Konica Minolta Japan, Inc. Product Multiple MFPs which implement Web Image Monitor Defaultunknown
Affected
- see the information provided by the vendor
- Vendor Ricoh Company, Ltd. Product Multiple laser printers and MFPs which implement Web Image Monitor Defaultunknown
Affected
- see the information provided by the vendor
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Konica Minolta Japan, Inc. | Multiple MFPs which implement Web Image Monitor | unknown | Affected
|
| Ricoh Company, Ltd. | Multiple laser printers and MFPs which implement Web Image Monitor | unknown | Affected
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (5)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-14317 Advisory
- https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2025-000001
- https://jvn.jp/en/jp/JVN20474768/
- https://www.konicaminolta.jp/business/support/important/250714_01_01.html
- https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000001
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
Red Hat
No data
GitHub
No data