{"id":6614,"date":"2025-06-09T11:10:46","date_gmt":"2025-06-09T11:10:46","guid":{"rendered":"http:\/\/localhost\/?p=6614"},"modified":"2025-06-09T11:10:46","modified_gmt":"2025-06-09T11:10:46","slug":"konica-minolta-bizhub-display-mfp-information-list-cross-site-scripting","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=6614","title":{"rendered":"Konica Minolta bizhub Display MFP Information List cross site scripting"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nKonica Minolta bizhub Display MFP Information List cross site scripting<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-09T14:31:06.495Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nKonica Minolta<\/td>\n<\/tr>\n
Product<\/th>\nbizhub<\/td>\n<\/tr>\n
Version<\/th>\n20250202<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n5.1 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:L\/UI:P\/VC:N\/VI:L\/VA:N\/SC:N\/SI:N\/SA:N\/E:P<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA cross-site scripting vulnerability was discovered in Konica Minolta bizhub, affecting versions up to 20250202. This vulnerability allows remote attackers to inject malicious scripts via the Model Name argument in the Display MFP Information List component. The issue has been publicly disclosed and could be exploited.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\nKonica Minolta<\/td>\n<\/tr>\n
Product<\/th>\nbizhub<\/td>\n<\/tr>\n
Affected Version<\/th>\n20250202<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n