/Vulnerability Library

Ricoh Web Image Monitor - Reflected XSS

CVE-2025-41393
Verified

Description

A reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor.

Severity

Medium

CVSS Score

6.1

Exploit Probability

1%

Published Date

May 19, 2025

Template Author

jpg0mez

CVE-2025-41393.yaml
6.1Score

CVSS Metrics

CVSS Vector:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE ID:
cwe-79

References

https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000001https://jvn.jp/en/jp/JVN20474768/https://nvd.nist.gov/vuln/detail/CVE-2025-41393

Remediation Steps

Apply the security patch from Ricoh for affected Web Image Monitor implementations.