Approved changes feed: RSS · Atom

cpe:2.3:a:ricoh_company,_ltd.:multiple_laser_printers_and_mfps_which_implement_web_image_monitor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRicoh Company, Ltd. (8c218467-a8cb-505f-ae89-b66f55ead3ea)
ProductMultiple Laser Printers And Mfps Which Implement Web Image Monitor (020127b9-0b6c-5085-a42b-d539b2d5bfd5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-41226 vulnerable 2026-06-03 15:23:35.745664 Details available
MEDIUM (4.7)
Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web Image Monitor. When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack.
Published: 2026-04-30T06:08:41.213Z
Updated: 2026-05-01T06:48:25.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41393 vulnerable 2026-06-03 15:01:14.773419 Details available
MEDIUM (6.1)
Reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].
Published: 2025-05-12T08:04:39.693Z
Updated: 2025-07-14T06:23:13.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47939 vulnerable 2026-06-03 14:57:02.654066 Details available
HIGH (7.7)
Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].
Published: 2024-11-01T04:29:04.040Z
Updated: 2025-05-21T07:02:10.101Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.