PT-2018-1949

Name of the Vulnerable Software and Affected Versions RICOH Aficio MP versions affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the RICOH Aficio MP's microprogram component Wizard, specifically in the...

PT-2018-1948

Name of the Vulnerable Software and Affected Versions RICOH MP versions affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the Wizard component /web/entry/en/address/adrsSetUserWizard.cgi of the RICOH MP multifunctional device's...

PT-2018-1921

Name of the Vulnerable Software and Affected Versions RICOH MP C406Z printer affected versions not specified Description A security issue has been found in the RICOH MP C406Z printer, related to HTML Injection and Stored XSS vulnerabilities. This issue is associated with adding addresses via the...

PT-2018-13821

Name of the Vulnerable Software and Affected Versions RICOH SP 4510SF printer affected versions not specified Description A security issue has been found related to HTML Injection and Stored XSS in the process of adding addresses. This issue is associated with the entryNameIn parameter used in th...

PT-2018-1920

Name of the Vulnerable Software and Affected Versions RICOH MP C6503 Plus printer affected versions not specified Description A security issue has been found in the RICOH MP C6503 Plus printer related to HTML Injection and Stored XSS vulnerabilities. This issue is associated with adding addresses...

CVE-2018-17001: Improper Neutralization of Input During Web Page Generation

On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

CVE-2018-17002: Improper Neutralization of Input During Web Page Generation

On the RICOH MP 2001 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

PT-2018-13822

Name of the Vulnerable Software and Affected Versions RICOH MP 2001 printer affected versions not specified Description A security issue has been found related to HTML Injection and Stored XSS in the process of adding addresses. This issue is associated with the entryNameIn parameter when accessi...

Design/Logic Flaw

RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter...

PT-2018-13268

Name of the Vulnerable Software and Affected Versions RICOH MP C4504ex devices affected versions not specified Description The issue concerns HTML Injection, which can be exploited via the "/web/entry/en/address/adrsSetUserWizard.cgi" API endpoint, specifically through the entryNameIn parameter...

CVE-2018-15884: Improper Neutralization of Input During Web Page Generation

RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter...