CVE-2019-25324: Ricoh Web Image Monitor

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

RICOH Web Image Monitor 1.09 contains an HTML injection vulnerability in the address configuration CGI script that allows attackers to inject malicious HTML code. Attackers can exploit the entryNameIn and entryDisplayNameIn parameters to insert arbitrary HTML content, potentially enabling cross-site scripting attacks.

Affected products

• Ricoh Ricoh Web Image Monitor: version 1.09 only

Published 2026-02-12. Last modified 2026-06-17.