Bizhub
Monthly
Cross-site request forgery in Konica Minolta bizhub multifunction printers up to firmware version 20250202 allows a remote attacker to trick an authenticated administrator into performing unintended actions, such as altering device settings. A public exploit is available, though no active exploitation has been confirmed by CISA KEV, and EPSS indicates a low probability of widespread exploitation (0.04%).
Cross-site scripting (XSS) vulnerability in Konica Minolta bizhub multifunction printers (firmware up to 20250202) allows remote attackers with low-privilege access to inject arbitrary web scripts via the Model Name parameter in the Display MFP Information List component. When an administrative user views the crafted page, the injected script executes in their browser, potentially leading to session hijacking or credential theft. Publicly available exploit code exists, though no active exploitation in the wild has been confirmed.
Cross-site request forgery in Konica Minolta bizhub multifunction printers up to firmware version 20250202 allows a remote attacker to trick an authenticated administrator into performing unintended actions, such as altering device settings. A public exploit is available, though no active exploitation has been confirmed by CISA KEV, and EPSS indicates a low probability of widespread exploitation (0.04%).
Cross-site scripting (XSS) vulnerability in Konica Minolta bizhub multifunction printers (firmware up to 20250202) allows remote attackers with low-privilege access to inject arbitrary web scripts via the Model Name parameter in the Display MFP Information List component. When an administrative user views the crafted page, the injected script executes in their browser, potentially leading to session hijacking or credential theft. Publicly available exploit code exists, though no active exploitation in the wild has been confirmed.