Information List by Vulnerability

After October 1, 2022, vulnerability information will be posted on this page. For information deemed important to customers, the same link will be posted in the latest Information area accessible directly from the top page.
The following list includes vulnerabilities that have not been confirmed to affect Ricoh products and services.

Filter your search

Select Importance

OR search by multiple keywords is available. Please enter keywords separated by spaces in the search input field.

Select Severity

Select Initial release month

Select Last update month

*Titles starting with

in the list below indicate important notices for RICOH Products and Services.
*Severity is reference information based on CVSS base scores.

Title	Severity	Vulnerability Information ID	CVE ID	Last update (Initial release)
Notice on potential impact of "Cross-Site Scripting (XSS) Vulnerability in SLNX Help Documentation via specific Parameter" (CVE-2025-41439) towards RICOH Streamline NX V3	Medium	ricoh-2025-000008	CVE-2025-41439	2025-06-30+09:00 （2025-06-30+09:00）
Specific Ricoh MFP and Printer Products - Multiple vulnerabilities (CVE-2017-9765, CVE-2024-2169, CVE-2024-51977, CVE-2024-51979, CVE-2024-51980, CVE-2024-51981, CVE-2024-51982, CVE-2024-51983, CVE-2024-51984)	High	ricoh-2025-000007	CVE-2017-9765CVE-2024-2169 CVE-2024-51977 CVE-2024-51979 CVE-2024-51980 CVE-2024-51981 CVE-2024-51982 CVE-2024-51983 CVE-2024-51984	2025-06-25+09:00 （2025-06-25+09:00）
Notice on potential impact of "Vulnerability Leading to Possible Code Execution via Remotely Upgrading" towards SLNX PC Client Application	Low	ricoh-2025-000006	CVE-2025-48825	2025-06-20+09:00 （2025-06-13+09:00）
Notice on potential impact of ”Arbitrary File Delete (Path Traversal) Vulnerability Leading to Code Execution" towards RICOH Streamline NX V3 PC Client	Critical	ricoh-2025-000005	CVE-2025-46783	2025-06-20+09:00 （2025-06-13+09:00）
Notice on potential impact of "Vulnerability Leading to Arbitrary File Overwrite via Save Log File" toward SLNX PC Client	Medium	ricoh-2025-000004	CVE-2025-36506	2025-06-20+09:00 （2025-06-13+09:00）
Specific Ricoh MFP and Printer Products - Vulnerabilities in the PostScript interpreter (CVE-2024-11344, CVE-2024-11345, CVE-2024-11346, CVE-2024-11347) and the embedded web server (CVE-2025-1127)	Critical	ricoh-2025-000003	CVE-2024-11344CVE-2024-11345CVE-2024-11346CVE-2024-11347CVE-2025-1127	2025-03-21+09:00 （2025-03-18+09:00）
Specific Ricoh MFP and Printer Products - Reflected Cross-Site Scripting Vulnerability via Web Image Monitor (CVE-2025-41393)	Medium	ricoh-2025-000001	CVE-2025-41393	2025-07-14+09:00 （2025-04-30+09:00）
Specific Ricoh MFP and Printer Products - Buffer overflow vulnerability (CVE-2024-47939)	High	ricoh-2024-000011	CVE-2024-47939	2025-06-17+09:00 （2024-10-31+09:00）
Specific Ricoh Printer Products - Java TM Platform vulnerability	Low	ricoh-2024-000010	CVE-2024-41995	2024-08-06+09:00 （2024-08-06+09:00）
Notice on potential impact of a heap buffer overflow vulnerability in WebRTC towards Ricoh products and services	High	ricoh-2024-000009	CVE-2023-7024	2024-07-30+09:00 （2024-07-30+09:00）
Specific Ricoh MFP and Printer Products - Buffer overflow vulnerability(CVE-2024-39927)	High	ricoh-2024-000008	CVE-2024-39927	2025-01-14+09:00 （2024-07-09+09:00）
Notice of security investigation: Vulnerability that an attacker can read and delete any file on the operating system.	Medium	ricoh-2024-000007	CVE-2024-37387	2024-06-18+09:00 （2024-06-18+09:00）
Notice of security investigation: Vulnerability that an attacker can write arbitrary property files at any place of the filesystem.	Medium	ricoh-2024-000006	CVE-2024-37124	2024-06-18+09:00 （2024-06-18+09:00）
Notice of security investigation: Vulnerability that an attacker can escalate privileges to NT Authority\System on the OS where RICOH Streamline NX PC Client is installed.	Medium	ricoh-2024-000005	CVE-2024-36480	2024-06-18+09:00 （2024-06-18+09:00）
Notice of security investigation: Arbitrary code execution vulnerability caused by ECF library implementation.	Medium	ricoh-2024-000004	CVE-2024-36252	2024-06-18+09:00 （2024-06-18+09:00）
Specific Ricoh MFP and Printer Products - a server-side request forgery vulnerability(CVE-2023-50733) , a firmware downgrade prevention vulnerability(CVE-2023-50738) and a buffer overflow vulnerability(CVE-2023-50739)	High	ricoh-2024-000003	CVE-2023-50733 CVE-2023-50738 CVE-2023-50739	2024-04-19+09:00 （2024-04-19+09:00）
Specific Ricoh MFP and Printer Products - Session Management Vulnerability (CVE-2024-21824)	Medium	ricoh-2024-000002	CVE-2024-21824	2024-03-06+09:00 （2024-03-06+09:00）
Vulnerabilities in the PostScript interpreter(CVE-2023-50734, CVE-2023-50735, CVE-2023-50736) and an input validation vulnerability in the SE Menu(CVE-2023-50737) towards Ricoh products	Critical	ricoh-2024-000001	CVE-2023-50734CVE-2023-50735CVE-2023-50736CVE-2023-50737	2024-02-05+09:00 （2024-02-05+09:00）
Specific Ricoh MFP and Printer Products - Cross-site scripting vulnerability(CVE-2022-37406) via Web Image monitor	Medium	ricoh-2023-000006	CVE-2022-37406	2025-01-23+09:00 （2024-05-28+09:00）
Notice on potential impact of "Apache ActiveMQ remote code execution vulnerability" (CVE-2023-46604) towards Ricoh products and services	Critical	ricoh-2023-000005	CVE-2023-46604	2023-12-25+09:00 （2023-11-21+09:00）