CVE-2025-10228

HighCVSS 8.8/10Last modified Oct 8, 2026

Description

Session Fixation vulnerability in Rolantis Information Technologies Agentis allows Session Hijacking.

This issue affects Agentis: before 4.44.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-384

Affected software

No affected versions have been published.

Timeline

Published
Oct 14, 2025
Last modified
Oct 8, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-102294.3A vulnerability has been found in Freshwork up to 1.2.3. This impacts an unknown function of the file /api/v2/logout. Such manipulation of tCVE-2025-10239.8A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a time-based bliCVE-2025-1023010.0A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without properCVE-2025-102317.8An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a locaCVE-2025-102325.4A weakness has been identified in 299ko up to 2.0.0. Affected by this issue is the function getSentDir/delete of the file plugin/filemanagerCVE-2025-102334.3A security vulnerability has been detected in kalcaddle kodbox 1.61. This affects the function fileGet/fileSave of the file app/controller/eCVE-2025-102344.8A vulnerability was detected in Scada-LTS up to 2.7.8.1. This vulnerability affects unknown code of the file /data_point_edit.shtm of the coCVE-2025-102354.8A flaw has been found in Scada-LTS up to 2.7.8.1. This issue affects some unknown processing of the file /reports.shtm of the component RepoCVE-2025-102367.5A vulnerability has been found in binary-husky gpt_academic up to 3.91. Impacted is the function merge_tex_files_ of the file crazy_functionCVE-2025-102376.7During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could alCVE-2025-102386.7During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products cCVE-2025-102397.2In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privileges and access to the
CVE-2025-10228: High severity, CVSS 8.8 | Vulnix