CVE-2025-58422EPSS p1.4%

CVE-2025-58422CVE-2025-58422

Description

RICOH Streamline NX versions 3.5.1 to 24R3 are vulnerable to tampering with operation history. If an attacker can perform a man-in-the-middle attack, they may alter the values of HTTP requests, which could result in tampering with the operation history of the product’s management tool.

Scoring

CVSS 3.1 ()
VectorCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS0.11% probability of exploitation · percentile 1.4% · 2026-10-05T12:00:23Z
Last modified2026-09-30
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.