CVE-2025-41393 Scanner
CVE-2025-41393 Scanner - Cross-Site Scripting (XSS) vulnerability in Ricoh Web Image Monitor
Used 3.3k times · 3.3k assets checked · url
CVE
CVE-2025-41393
5.1
CVSSmedium
Exploitable remotely over the internet · no authentication required · user interaction needed.
Description
Reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].
Attack Vector
Network
Privileges Req.
None
User Interaction
Required
multiple laser printers and mfps which implement web image monitormultiple mfps which implement web image monitor
Updated Sep 28, 2026View on NVD →
S4E scanner
CVE history: multiple laser printers and mfps which implement web image monitor
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →