Ricoh Company, Ltd. Ricoh Streamline NX vulnerabilities

3 vulnerabilities

Known vulnerabilities in Ricoh Company, Ltd. Ricoh Streamline NX, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2025-41439ricoh company, ltd.ricoh streamline nx
EPSS score
0.22%
A reflected cross-site scripting vulnerability via a specific parameter exists in SLNX Help Documentation of RICOH Streamline NX. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of the user who accessed the product.3.1CVE-2025-58422ricoh company, ltd.ricoh streamline nx
EPSS score
0.11%
RICOH Streamline NX versions 3.5.1 to 24R3 are vulnerable to tampering with operation history. If an attacker can perform a man-in-the-middle attack, they may alter the values of HTTP requests, which could result in tampering with the operation history of the product’s management tool.8.2CVE-2026-21409ricoh company, ltd.ricoh streamline nx
EPSS score
0.33%
Improper authorization vulnerability exists in RICOH Streamline NX 3.5.1 to 24R3. If a man-in-the-middle attack is conducted on the communication between the affected product and its user, and some crafted request is processed by the product, the user's registration information and/or OIDC (OpenID Connect) tokens may be retrieved.