{"id":"CVE-2019-25324","state":"PUBLISHED","title":"RICOH Web Image Monitor 1.09 - HTML Injection","description":"RICOH Web Image Monitor 1.09 contains an HTML injection vulnerability in the address configuration CGI script that allows attackers to inject malicious HTML code. Attackers can exploit the entryNameIn and entryDisplayNameIn parameters to insert arbitrary HTML content, potentially enabling cross-site scripting attacks.","publishedAt":"2026-02-12T22:48:36.676Z","updatedAt":"2026-02-13T15:42:29.809Z","severity":{"score":5.1,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["RICOH RICOH Web Image Monitor"],"affected":[{"vendor":"RICOH","product":"RICOH Web Image Monitor","versions":[{"version":"1.09","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/47827","https://www.ricoh.com/","http://support-download.com/services/device/webhlp/nb/gen/v140cc1/en/p_top010.html","https://www.vulncheck.com/advisories/ricoh-web-image-monitor-html-injection"],"weaknesses":["CWE-79"],"ingestedAt":"2026-10-29T19:45:53.332Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/25xxx/CVE-2019-25324.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2019-25324","state":"PUBLISHED","datePublished":"2026-02-12T22:48:36.676Z","dateUpdated":"2026-02-13T15:42:29.809Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-02-12T14:36:52.749Z"},"containers":{"cna":{"title":"RICOH Web Image Monitor 1.09 - HTML Injection","descriptions":[{"lang":"en","value":"RICOH Web Image Monitor 1.09 contains an HTML injection vulnerability in the address configuration CGI script that allows attackers to inject malicious HTML code. Attackers can exploit the entryNameIn and entryDisplayNameIn parameters to insert arbitrary HTML content, potentially enabling cross-site scripting attacks."}],"affected":[{"vendor":"RICOH","product":"RICOH Web Image Monitor","versions":[{"version":"1.09","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/47827","name":"ExploitDB-47827","tags":["exploit"]},{"url":"https://www.ricoh.com/","name":"Official Vendor Homepage","tags":["product"]},{"url":"http://support-download.com/services/device/webhlp/nb/gen/v140cc1/en/p_top010.html","name":"Hardware Support Link","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/ricoh-web-image-monitor-html-injection","name":"VulnCheck Advisory: RICOH Web Image Monitor 1.09 - HTML Injection","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":5.1,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-79","lang":"en","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-02-12T22:48:36.676Z"},"datePublic":"2019-05-06T00:00:00.000Z","credits":[{"lang":"en","value":"Ismail Tasdelen","type":"finder"}],"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-02-13T15:42:19.963002Z","id":"CVE-2019-25324","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-13T15:42:29.809Z"}}]}}}