VULNERABILITY INTELLIGENCE
CVE-2025-41439
CVSS score6.1 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-06-30
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
A reflected cross-site scripting vulnerability via a specific parameter exists in SLNX Help Documentation of RICOH Streamline NX. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of the user who accessed the product.
Weakness classification
- vultures@jpcert.or.jp: CWE-79