CNNVD-202507-2871 Information

CNNVD ID

CNNVD-202507-2871

CVE-2025-4284

  • CNNVD Published: 2025-07-22

Description (Chinese)

Rolantis Agentis是土耳其Rolantis公司的一个用于企业信息管理和自动化处理的软件。 Rolantis Agentis 4.32之前版本存在跨站脚本漏洞,该漏洞源于网页生成期间输入中和不当,可能导致反射型跨站脚本和DOM型跨站脚本。

Description (English)

Rolandis Agentis is a software for enterprise information management and automated processing at Rolantis, Turkey. The pre-Rolantis Agentis 4.32 version had a cross-site script loophole, which originated in the middle and inappropriate input during the web page generation, and could lead to reflect-type and dom-type cross-site scripts.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

Rolantis

Published

2025-07-22

Last Modified

2026-02-24

References

https://www.usom.gov.tr/bildirim/tr-25-0168 https://access.redhat.com/security/cve/cve-2025-4284 https://nvd.nist.gov/vuln/detail/CVE-2025-4284

Patch

https://www.rolantis.com.tr/

Share on: