Lucene search

K
nvd[email protected]NVD:CVE-2022-38710
HistoryNov 03, 2022 - 8:15 p.m.

CVE-2022-38710

2022-11-0320:15:29
CWE-312
CWE-319
web.nvd.nist.gov
1
ibm
rpa
disclosure
sensitive information
vulnerability

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.001 Low

EPSS

Percentile

31.3%

IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version information that could aid in further attacks against the system. IBM X-Force ID: 234292.

Affected configurations

NVD
Node
microsoftwindowsMatch-
AND
ibmrobotic_process_automationRange<21.0.3
OR
ibmrobotic_process_automation_as_a_serviceRange<21.0.3
OR
ibmrobotic_process_automation_for_cloud_pakRange<21.0.3

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.001 Low

EPSS

Percentile

31.3%

Related for NVD:CVE-2022-38710