CVE-2019-25324: RICOH Web Image Monitor 1.09 - HTML Injection

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-02-12 · updated 2026-06-17
Weakness: CWE-79

Description

RICOH Web Image Monitor 1.09 contains an HTML injection vulnerability in the address configuration CGI script that allows attackers to inject malicious HTML code. Attackers can exploit the entryNameIn and entryDisplayNameIn parameters to insert arbitrary HTML content, potentially enabling cross-site scripting attacks.

Affected products

RICOH Web Image Monitor: 1.09

References

http://support-download.com/services/device/webhlp/nb/gen/v140cc1/en/p_top010.html
https://www.exploit-db.com/exploits/47827
https://www.ricoh.com/
https://www.vulncheck.com/advisories/ricoh-web-image-monitor-html-injection

Get alerted when CVE-2019-25324 or the next vulnerability affects your stack