{"id":"CVE-2025-41439","state":"PUBLISHED","title":"A reflected cross-site scripting vulnerability via a specific parameter exists in SLNX Help Documentation of RICOH Streamline NX. If this vulnerability is exploited, an arbitrary s","description":"A reflected cross-site scripting vulnerability via a specific parameter exists in SLNX Help Documentation of RICOH Streamline NX. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of the user who accessed the product.","publishedAt":"2025-06-30T09:16:19.377Z","updatedAt":"2025-06-30T15:12:29.712Z","severity":{"score":5.1,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","source":"jpcert"},"assigner":"jpcert","products":["Ricoh Company, Ltd. RICOH Streamline NX"],"affected":[{"vendor":"Ricoh Company, Ltd.","product":"RICOH Streamline NX","versions":[{"version":"versions 3.5.0 to 3.7.2","status":"affected"}]}],"references":["https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000008","https://jvn.jp/en/jp/JVN24333956/"],"weaknesses":["CWE-79"],"ingestedAt":"2026-10-29T20:09:09.358Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/41xxx/CVE-2025-41439.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-41439","state":"PUBLISHED","datePublished":"2025-06-30T09:16:19.377Z","dateUpdated":"2025-06-30T15:12:29.712Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2025-06-20T07:06:29.717Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A reflected cross-site scripting vulnerability via a specific parameter exists in SLNX Help Documentation of RICOH Streamline NX. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of the user who accessed the product."}],"affected":[{"vendor":"Ricoh Company, Ltd.","product":"RICOH Streamline NX","versions":[{"version":"versions 3.5.0 to 3.7.2","status":"affected"}]}],"references":[{"url":"https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000008"},{"url":"https://jvn.jp/en/jp/JVN24333956/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"MEDIUM","baseScore":6.1,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}},{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV4_0":{"version":"4.0","baseSeverity":"MEDIUM","baseScore":5.1,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-79","description":"Cross-site scripting (XSS)","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2025-06-30T09:16:19.377Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-06-30T15:12:16.723838Z","id":"CVE-2025-41439","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-30T15:12:29.712Z"}}]}}}