What’s Vulnerable › Vulnerabilities

CVE-2025-41393

• Severity: medium (CVSS 5.1 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-05-12 · updated 2026-06-17
• Weakness: CWE-79

Description

Reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].

Affected products

• KONICA MINOLTA JAPAN, INC. Multiple MFPs which implement Web Image Monitor: see the information provided by the vendor
• Ricoh Company, Ltd. Multiple laser printers and MFPs which implement Web Image Monitor: see the information provided by the vendor

References

• https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2025-000001
• https://jvn.jp/en/jp/JVN20474768/
• https://www.konicaminolta.jp/business/support/important/250714_01_01.html
• https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000001

Get alerted when CVE-2025-41393 or the next vulnerability affects your stack