CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2025-5885: Konica Minolta bizhub cross-site request forgery

5.3 CVSS

Description

A vulnerability has been found in Konica Minolta bizhub up to 20250202 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. In Konica Minolta bizhub bis 20250202 wurde eine problematische Schwachstelle gefunden. Das betrifft eine unbekannte Funktionalität. Durch Manipulation mit unbekannten Daten kann eine cross-site request forgery-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung.

Classification

CVE ID: CVE-2025-5885

CVSS Base Severity: MEDIUM

CVSS Base Score: 5.3

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Problem Types

Cross-Site Request Forgery Missing Authorization

Affected Products

Vendor: Konica Minolta

Product: bizhub

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.02% (probability of being exploited)

EPSS Percentile: 2.1% (scored less or equal to compared to others)

EPSS Date: 2025-06-23 (when was this score calculated)

References

https://nvd.nist.gov/vuln/detail/CVE-2025-5885
https://vuldb.com/?id.311656
https://vuldb.com/?ctiid.311656
https://vuldb.com/?submit.493666
https://drive.google.com/file/d/1pECiiSWdB_ERzzGrc--WY63IzZxR6i6L/view

Timeline