CVE-2022-46773

🗓️ 15 Mar 2023 20:10:15Reported by ibmType

IBM RPA 21.0.0 - 21.0.7 and 23.0.0, client-side validation bypass vulnerabilit

Reporter	Title	Published	Views	Family All 5
NVD	CVE-2022-46773	15 Mar 202320:15	–	nvd
Cvelist	CVE-2022-46773 IBM Robotic Process Automation security bypass	15 Mar 202319:57	–	cvelist
CNVD	IBM Robotic Process Automation License Issue Vulnerability (CNVD-2023-79715)	17 Mar 202300:00	–	cnvd
Prion	Input validation	15 Mar 202320:15	–	prion
IBM Security Bulletins	Security Bulletin: A vulnerability in IBM Robotic Process Automation may allow a user to create invalid credential pools (CVE-2022-46773)	8 Mar 202314:17	–	ibm

Nvd

Vulners

Node

ibm robotic_process_automationRange21.0.0–21.0.7.1

ibm robotic_process_automationMatch23.0.0

ibm robotic_process_automation_as_a_serviceRange<23.0.1

ibm robotic_process_automation_for_cloud_pakRange21.0.0–21.0.7.1

ibm robotic_process_automation_for_cloud_pakMatch23.0.0

[
  {
    "defaultStatus": "unaffected",
    "product": "Robotic Process Automation",
    "vendor": "IBM",
    "versions": [
      {
        "lessThan": "21.0.7",
        "status": "affected",
        "version": "21.0.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "23.0.0"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/242951
ibm	www.ibm.com/support/pages/node/6962155

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Mar 2023 20:15Current

5.3Medium risk

Vulners AI Score5.3

CVSS36.5

EPSS0.001

CWE-287