What is CVE-2025-41439?

CVE-2025-41439 is a medium-severity vulnerability in Ricoh Company, Ltd. Streamline Nx, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2025-06-30.

How severe is CVE-2025-41439?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Ricoh Company, Ltd. Streamline Nx

CVE-2025-41439

A reflected cross-site scripting vulnerability via a specific parameter exists in SLNX Help Documentation of RICOH Streamline NX. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of the user who accessed the product.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (9.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Ricoh Company, Ltd. Streamline Nx — versions versions 3.5.0 to 3.7.2

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

Frequently asked questions

What is CVE-2025-41439?: CVE-2025-41439 is a medium-severity vulnerability in Ricoh Company, Ltd. Streamline Nx, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2025-06-30.
How severe is CVE-2025-41439?: Medium severity. CVSS v3 base score is 6.1 out of 10.