Cross Site Scripting Vulnerability in Konica Minolta bizhub Devices

CVE-2025-5884

What is CVE-2025-5884?

A vulnerability has been identified in Konica Minolta bizhub devices, specifically affecting the Display MFP Information List component. This issue arises due to improper handling of the Model Name argument, which can be exploited to execute cross site scripting attacks. The flaw allows remote attackers to manipulate input data, potentially leading to unauthorized script execution within a user's browser session. The vulnerability has been disclosed publicly, prompting users to take necessary security precautions to mitigate potential threats.

References