Show filters
72 Total Results
Displaying 31-40 of 72
Sort by:
Attacker Value
Unknown
CVE-2022-22503
Disclosure Date: October 03, 2022 (last updated February 24, 2025)
IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 227125.
0
Attacker Value
Unknown
CVE-2022-36774
Disclosure Date: October 03, 2022 (last updated October 08, 2023)
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulation of the client proxy configuration. IBM X-Force ID: 233575.
0
Attacker Value
Unknown
CVE-2022-41294
Disclosure Date: October 03, 2022 (last updated February 24, 2025)
IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api. IBM X-Force ID: 236807.
0
Attacker Value
Unknown
CVE-2022-38709
Disclosure Date: October 03, 2022 (last updated February 24, 2025)
IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 for Cloud Pak is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 234291.
0
Attacker Value
Unknown
CVE-2022-39168
Disclosure Date: September 28, 2022 (last updated February 24, 2025)
IBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in upgrade logs. IBM X-Force ID: 235422.
0
Attacker Value
Unknown
CVE-2022-22490
Disclosure Date: August 04, 2022 (last updated February 24, 2025)
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to obtain sensitive Azure bot credential information. IBM X-Force ID: 226342.
0
Attacker Value
Unknown
CVE-2022-35280
Disclosure Date: August 04, 2022 (last updated February 24, 2025)
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 230634.
0
Attacker Value
Unknown
CVE-2022-33169
Disclosure Date: July 29, 2022 (last updated February 24, 2025)
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to insufficiently protected credentials for users created via a bulk upload. IBM X-Force ID: 228888.
0
Attacker Value
Unknown
CVE-2022-22334
Disclosure Date: July 29, 2022 (last updated October 08, 2023)
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user to access information from a tenant of which they should not have access. IBM X-Force ID: 219391.
0
Attacker Value
Unknown
CVE-2022-34338
Disclosure Date: July 29, 2022 (last updated February 24, 2025)
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could disclose sensitive information due to improper privilege management for storage provider types. IBM X-Force ID: 229962.
0
