Show filters
72 Total Results
Displaying 21-30 of 72
Sort by:
Attacker Value
Unknown
CVE-2022-46773
Disclosure Date: March 15, 2023 (last updated November 08, 2023)
IBM Robotic Process Automation 21.0.0 - 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for credential pools. Invalid credential pools may be created as a result. IBM X-Force ID: 242951.
0
Attacker Value
Unknown
CVE-2023-22863
Disclosure Date: January 18, 2023 (last updated February 24, 2025)
IBM Robotic Process Automation 20.12.0 through 21.0.2 defaults to HTTP in some RPA commands when the prefix is not explicitly specified in the URL. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 244109.
0
Attacker Value
Unknown
CVE-2023-22594
Disclosure Date: January 18, 2023 (last updated February 24, 2025)
IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 244075.
0
Attacker Value
Unknown
CVE-2023-22592
Disclosure Date: January 18, 2023 (last updated February 24, 2025)
IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.4 could allow a local user to perform unauthorized actions due to insufficient permission settings. IBM X-Force ID: 244073.
0
Attacker Value
Unknown
CVE-2022-43844
Disclosure Date: January 05, 2023 (last updated February 24, 2025)
IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken access control. A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak. IBM X-Force ID: 239081.
0
Attacker Value
Unknown
CVE-2022-43573
Disclosure Date: January 05, 2023 (last updated February 24, 2025)
IBM Robotic Process Automation 20.12 through 21.0.6 is vulnerable to exposure of the name and email for the creator/modifier of platform level objects. IBM X-Force ID: 238678.
0
Attacker Value
Unknown
CVE-2022-41740
Disclosure Date: January 05, 2023 (last updated February 24, 2025)
IBM Robotic Process Automation 20.12 through 21.0.6 could allow an attacker with physical access to the system to obtain highly sensitive information from system memory. IBM X-Force ID: 238053.
0
Attacker Value
Unknown
CVE-2022-42442
Disclosure Date: November 03, 2022 (last updated December 22, 2024)
IBM Robotic Process Automation for Cloud Pak 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to exposure of the first tenant owner e-mail address to users with access to the container platform. IBM X-Force ID: 238214.
0
Attacker Value
Unknown
CVE-2022-38710
Disclosure Date: November 03, 2022 (last updated February 24, 2025)
IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version to an unauthorized control sphere information that could aid in further attacks against the system. IBM X-Force ID: 234292.
0
Attacker Value
Unknown
CVE-2022-43574
Disclosure Date: November 03, 2022 (last updated February 24, 2025)
"IBM Robotic Process Automation 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to incorrect permission assignment which could allow access to application configurations. IBM X-Force ID: 238679."
0
