Show filters
52 Total Results
Displaying 31-40 of 52
Sort by:
Attacker Value
Unknown
CVE-2022-41740
Disclosure Date: January 05, 2023 (last updated February 24, 2025)
IBM Robotic Process Automation 20.12 through 21.0.6 could allow an attacker with physical access to the system to obtain highly sensitive information from system memory. IBM X-Force ID: 238053.
0
Attacker Value
Unknown
CVE-2022-43901
Disclosure Date: December 01, 2022 (last updated February 24, 2025)
IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.3 could disclose sensitive information. An authenticated local attacker could exploit this vulnerability to possibly gain information to other IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps components. IBM X-Force ID: 240829.
0
Attacker Value
Unknown
CVE-2022-43900
Disclosure Date: December 01, 2022 (last updated February 24, 2025)
IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.2 could provide a weaker than expected security. A local attacker can create an outbound network connection to another system. IBM X-Force ID: 240827.
0
Attacker Value
Unknown
CVE-2022-42442
Disclosure Date: November 03, 2022 (last updated December 22, 2024)
IBM Robotic Process Automation for Cloud Pak 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to exposure of the first tenant owner e-mail address to users with access to the container platform. IBM X-Force ID: 238214.
0
Attacker Value
Unknown
CVE-2022-38710
Disclosure Date: November 03, 2022 (last updated February 24, 2025)
IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version to an unauthorized control sphere information that could aid in further attacks against the system. IBM X-Force ID: 234292.
0
Attacker Value
Unknown
CVE-2022-43574
Disclosure Date: November 03, 2022 (last updated February 24, 2025)
"IBM Robotic Process Automation 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to incorrect permission assignment which could allow access to application configurations. IBM X-Force ID: 238679."
0
Attacker Value
Unknown
CVE-2022-22493
Disclosure Date: October 04, 2022 (last updated February 24, 2025)
IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request forgery, caused by improper cookie attribute setting. IBM X-Force ID: 226449.
0
Attacker Value
Unknown
CVE-2022-36774
Disclosure Date: October 03, 2022 (last updated October 08, 2023)
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulation of the client proxy configuration. IBM X-Force ID: 233575.
0
Attacker Value
Unknown
CVE-2022-38709
Disclosure Date: October 03, 2022 (last updated February 24, 2025)
IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 for Cloud Pak is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 234291.
0
Attacker Value
Unknown
CVE-2022-39168
Disclosure Date: September 28, 2022 (last updated February 24, 2025)
IBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in upgrade logs. IBM X-Force ID: 235422.
0
