CVE-2025-41439

CVSS 5.1 MEDIUMEPSS 0.2%CWE-79

A reflected cross-site scripting vulnerability via a specific parameter exists in SLNX Help Documentation of RICOH Streamline NX. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of the user who accessed the product.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Affected products

Ricoh Company, Ltd. · RICOH Streamline NX

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://jvn.jp/en/jp/JVN24333956/https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000008