CVE-2019-25324: RICOH Web Image Monitor 1.09 - HTML Injection

Published Feb 12, 2026

Updated

RICOH Web Image Monitor 1.09 contains an HTML injection vulnerability in the address configuration CGI script that allows attackers to inject malicious HTML code. Attackers can exploit the entryNameIn and entryDisplayNameIn parameters to insert arbitrary HTML content, potentially enabling cross-site scripting attacks.

Affected Software

1 affected component

Ricoh Web Image Monitor

Event History

Feb 12, 2026

CVE Published

via MITRE·10:48 PM

Data Sourced

via MITRE·10:48 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2019-25324?

CVE-2019-25324 is rated as a moderate severity vulnerability due to its potential to allow HTML injection via the Ricoh Web Image Monitor.

How can I fix CVE-2019-25324?

To fix CVE-2019-25324, update your Ricoh Web Image Monitor software to the latest version that addresses the HTML injection vulnerability.

What systems are affected by CVE-2019-25324?

CVE-2019-25324 affects Ricoh Web Image Monitor version 1.09, allowing exploitation of its HTML configuration features.

What type of attack does CVE-2019-25324 enable?

CVE-2019-25324 enables attackers to inject malicious HTML code, which can lead to various attacks such as phishing or redirecting users.

What are entryNameIn and entryDisplayNameIn in the context of CVE-2019-25324?

In the context of CVE-2019-25324, entryNameIn and entryDisplayNameIn are parameters susceptible to exploitation for HTML injection.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.