Ricoh Company, Ltd. vulnerabilities, page 2
31 vulnerabilities
Known vulnerabilities in Ricoh Company, Ltd. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 23 products.
CVE-2024-37124ricoh company, ltd.ricoh streamline nx pc client
EPSS score0.51%
Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, an attacker may create an arbitrary file in the PC where the product is installed.CVE-2024-37387ricoh company, ltd.ricoh streamline nx pc clientEPSS score0.16%
Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, files in the PC where the product is installed may be altered.CVE-2024-22475brother industries, ltd.multiple printers and scanners+3EPSS score0.28%
Cross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. allows a remote unauthenticated attacker to perform unintended operations on the affected product. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].CVE-2019-6021ricoh company, ltd.library information management system limedioEPSS score0.85%
Open redirect vulnerability in Library Information Management System LIMEDIO all versions allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL.CVE-2026-21409ricoh company, ltd.ricoh streamline nxEPSS score0.33%
Improper authorization vulnerability exists in RICOH Streamline NX 3.5.1 to 24R3. If a man-in-the-middle attack is conducted on the communication between the affected product and its user, and some crafted request is processed by the product, the user's registration information and/or OIDC (OpenID Connect) tokens may be retrieved.CVE-2026-41226konica minolta japan, inc.multiple mfps which implement ricoh web image monitor+1EPSS score0.38%
Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web Image Monitor. When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack.CVE-2026-26050ricoh company, ltd.ジョブログ集計/分析ソフトウェア ricohジョブログ集計ツールEPSS score0.21%
The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrative privileges.CVE-2026-56809konica minolta japan, inc.multiple mfps which implement ricoh web image monitor+1EPSS score0.34%
Multiple laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor contain a reflected cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who accesses a crafted URL.CVE-2026-24466murata machinery, ltd.see "references" section+2EPSS score0.16%
Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.CVE-2026-50100konica minolta japan, inc.multiple printer drivers+1EPSS score0.18%
Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a privilege escalation vulnerability. If this vulnerability is exploited, an attacker who can log in to a computer running an affected printer driver could elevate privileges by using a specially crafted driver.CVE-2023-30759ricoh company, ltd.printer driver packager nx+1EPSS score0.14%
The driver installation package created by Printer Driver Packager NX v1.0.02 to v1.1.25 fails to detect its modification and may spawn an unexpected process with the administrative privilege. If a non-administrative user modifies the driver installation package and runs it on the target PC, an arbitrary program may be executed with the administrative privilege.