PT-2026-7924 · Ricoh · Ricoh Web Image Monitor

Ismail Tasdelen · Published 2026-02-12 · Updated 2026-02-12 · CVE-2019-25324

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions RICOH Web Image Monitor version 1.09

Description RICOH Web Image Monitor 1.09 contains an HTML injection issue in the address configuration CGI script. This allows attackers to inject malicious HTML code by exploiting the entryNameIn and entryDisplayNameIn parameters. Successful exploitation could lead to cross-site scripting attacks. The vulnerable parameters allow the insertion of arbitrary HTML content.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-25324

Affected Products

Ricoh Web Image Monitor

References · 6

• 🔥 https://exploit-db.com/exploits/47827 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25324 · Security Note
• https://t.me/CVEtracker/44567 · Telegram Post
• https://ricoh.com · Note
• https://vulncheck.com/advisories/ricoh-web-image-monitor-html-injection · Note
• http://support-download.com/services/device/webhlp/nb/gen/v140cc1/en/p_top010.html · Note