PT-2025-27431 · Ricoh · Ricoh Streamline Nx

Matteo Santini · Published 2025-06-30 · Updated 2025-06-30 · CVE-2025-41439

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: RICOH Streamline NX (affected versions not specified)

Description: A reflected cross-site scripting issue exists due to a specific parameter in the SLNX Help Documentation of RICOH Streamline NX. If exploited, this could allow the execution of an arbitrary script in the web browser of the user who accessed the product.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-41439

Affected Products

Ricoh Streamline Nx

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-41439 · Security Note
• https://twitter.com/VulmonFeeds/status/1939679794242711898 · Twitter Post
• https://twitter.com/CVEnew/status/1939621252877984111 · Twitter Post
• https://jvn.jp/en/jp/JVN24333956 · Note
• https://t.me/cvetracker/27419 · Telegram Post
• https://ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000008 · Note