Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rolantis Information Technologies Agentis allows SQL Injection.
CVSS 3.1CRITICAL 10.0·Network·No auth·No interaction·EPSS 0.00377·Published 2025-07-22·Fixed in 4.32CWE-89
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Rolantis Information Technologies Agentis allows Reflected XSS, DOM-Based XSS.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00217·Published 2025-07-22·Fixed in 4.32CWE-79