CVE-2019-25324
Awaiting Analysis Awaiting Analysis - Queue

HTML Injection in RICOH Web Image Monitor Address Configuration

Publication date: 2026-02-12

Last updated on: 2026-02-13

Assigner: VulnCheck

Description
RICOH Web Image Monitor 1.09 contains an HTML injection vulnerability in the address configuration CGI script that allows attackers to inject malicious HTML code. Attackers can exploit the entryNameIn and entryDisplayNameIn parameters to insert arbitrary HTML content, potentially enabling cross-site scripting attacks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-02-12
Last Modified
2026-02-13
Generated
2026-07-06
AI Q&A
2026-02-13
EPSS Evaluated
2026-07-05
NVD
CVE-2019-25324
EUVD
EUVD-2019-19450

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ricoh web_image_monitor 1.09

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in RICOH Web Image Monitor version 1.09 and involves an HTML injection flaw in the address configuration CGI script.

Attackers can exploit the parameters entryNameIn and entryDisplayNameIn to inject malicious HTML code.

This injection can allow attackers to insert arbitrary HTML content, which may lead to cross-site scripting (XSS) attacks.

Impact Analysis

Exploitation of this vulnerability can allow attackers to execute malicious HTML or scripts in the context of the affected web application.

This can lead to cross-site scripting attacks, potentially enabling attackers to steal user credentials, hijack user sessions, or perform unauthorized actions on behalf of users.

The vulnerability has a moderate severity with CVSS v3.1 base score of 6.1, indicating a significant impact if exploited.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2019-25324. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart