CVE-2025-41393: fallo de gravedad media en KONICA MINOLTA JAPAN, INC.
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
28Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendcvss 5.1epss 0.7%
Reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Productos afectados
KONICA MINOLTA JAPAN, INC. · Multiple MFPs which implement Web Image MonitorRicoh Company, Ltd. · Multiple laser printers and MFPs which implement Web Image MonitorCVEs relacionadas — KONICA MINOLTA JAPAN, INC.
En el mismo producto, de las más peligrosas a las menos.