Robotic Process Automation As A Service (Ibm) - vulnerabilities (CVEs)
17 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2023-07-19. Vendor: Ibm.
CVEs of Robotic Process Automation As A Service
- CVE-2023-35900 - CVSS 5.3 (medium), 2023-07-19: IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which…
- CVE-2023-35901 - CVSS 5.3 (medium), 2023-07-17: IBM Robotic Process Automation 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 is vulnerable to client side validation bypass which could allow invalid…
- CVE-2023-22591 - CVSS 3.9 (low), 2023-03-15: IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user with physical access to the system due to session tokens for…
- CVE-2022-46773 - CVSS 6.5 (medium), 2023-03-15: IBM Robotic Process Automation 21.0.0 - 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for credential pools. Invalid credential pools may be…
- CVE-2023-25680 - CVSS 6.5 (medium), 2023-03-15: IBM Robotic Process Automation 21.0.1 through 21.0.5 is vulnerable to insufficiently protecting credentials. Queue Provider credentials are not obfuscated…
- CVE-2023-22863 - CVSS 5.9 (medium), 2023-01-18: IBM Robotic Process Automation 20.12.0 through 21.0.2 defaults to HTTP in some RPA commands when the prefix is not explicitly specified in the URL. This could…
- CVE-2023-22594 - CVSS 5.4 (medium), 2023-01-18: IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
- CVE-2022-43573 - CVSS 5.3 (medium), 2023-01-05: IBM Robotic Process Automation 20.12 through 21.0.6 is vulnerable to exposure of the name and email for the creator/modifier of platform level objects. IBM…
- CVE-2022-38710 - CVSS 5.3 (medium), 2022-11-03: IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version to an unauthorized control sphere information that could aid in further…
- CVE-2022-36774 - CVSS 6.5 (medium), 2022-10-06: IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulation of the client proxy configuration.…
- CVE-2022-22503 - CVSS 6.1 (medium), 2022-10-06: IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious…
- CVE-2022-22490 - CVSS 4.9 (medium), 2022-08-10: IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to obtain sensitive Azure bot credential information. IBM X-Force ID:…
- CVE-2022-33953 - CVSS 4.6 (medium), 2022-06-24: IBM Robotic Process Automation 21.0.1 and 21.0.2 could allow a user with psychical access to the system to obtain sensitive information due to insufficiently…
- CVE-2022-22502 - CVSS 5.4 (medium), 2022-06-24: IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…
- CVE-2022-22319 - CVSS 5.4 (medium), 2022-05-09: IBM Robotic Process Automation 21.0.1 could allow a register user on the system to physically delete a queue that could cause disruption for any scripts…
- CVE-2022-22434 - CVSS 4.6 (medium), 2022-05-05: IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user with physical access to create an API request modified to create additional…
- CVE-2022-22433 - CVSS 7.5 (high), 2022-05-05: IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A…
