IBM Robotic Process Automation Security Vulnerability

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. A security vulnerability exists in IBM Robotic Process Automation and IBM Robotic...

Ivanti Automation Security Breach

Ivanti Automation is an application from Ivanti USA. It simplifies the management of complex hybrid environments by automating infrastructure, cloud and workspace automation. A security vulnerability exists in Ivanti Automation versions prior to 2023.4 that stems from insecure inter-process...

PT-2023-29450 · Ibm · Ibm Robotic Process Automation For Cloud Pak +1

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation versions 21.0.0 through 21.0.7.10 IBM Robotic Process Automation versions 23.0.0 through 23.0.10 IBM Robotic Process Automation for Cloud Pak versions 21.0.0 through 21.0.7.10 IBM Robotic Process Automation for...

Announcing Microsoft Secure Future Initiative to advance security engineering

Today Microsoft’s Vice Chair and President Brad Smith shared insight on the global cybersecurity landscape and introduced our Secure Future Initiative. These engineering advances anticipate future cyberthreats, such as increasing digital attacks on identity systems. They also address how we will...

Security Bulletin: A vulnerability in jquery may affect IBM Robotic Process Automation for Cloud Pak and result in an attacker obtaining sensitive information. (CVE-2020-23064)

Summary There is a vulnerability in jQuery used by IBM Robotic Process Automation for Cloud Pak as part of the operator, which may result in cross site scripting CVE-2020-23064. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details CVEID:...

Security Bulletin: A vulnerability in IBM Robotic Process Automation may result in access to client vault credentials (CVE-2023-45189).

Summary A vulnerability in IBM Robotic Process Automation may result in access to client vault credentials. This difficult to exploit vulnerability could allow a low privileged attacker to programmatically access client vault credentials. Vulnerability Details CVEID: CVE-2023-45189 DESCRIPTION: A...

Explaining the Business Value of Qualys Enterprise TruRisk Platform to Your Leadership

New IDC White Paper Reports Findings by Qualys Customers As a cybersecurity leader, you may struggle to help your C-suite see the business value of what your team does. Forget “speeds and feeds”; key decision-makers are solely focused on The Numbers. While reports from most security tools excel a...

Security Bulletin: IBM Cloud Pak for Network Automation 2.6.3 fixes multiple security vulnerabilities

Summary IBM Cloud Pak for Network Automation 2.6.3 fixes multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID: CVE-2023-35887 DESCRIPTION: Apache MINA SSHD could allow a remote authenticated attacker to obtain sensitive information, caused by improper...

Qualys API Best Practices: Policy Compliance – Posture Streaming (PCRS) API

This API Best Practices Series is designed for Qualys customer programmers or stakeholders with a general knowledge of programming who want to implement best practices for improving the development, design, and performance of their programs that use the Qualys API. For non-customers, the Qualys A...

Salt: Multiple Vulnerabilities

Background Salt is a fast, intelligent and scalable automation engine. Description Multiple vulnerabilities have been discovered in Salt. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...

PCI DSS 4.0: How to Ensure Full Compliance with New Requirements

The Payment Card Industry Data Security Standard PCI DSS is one of the oldest mainstream requirements for compliance, originating in 2004. The PCI Security Standards Council manages the standard to ensure security for the global payment system. It globally applies to all entities that store,...

CVE-2023-4964

Potential open redirect vulnerability in opentext Service Management Automation X SMAX versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11 and opentext Asset Management X AMX versions 2021.08, 2021.11, 2022.05, 2022.11. The vulnerability could allow attackers ...

CVE-2023-4964

Potential open redirect vulnerability in opentext Service Management Automation X SMAX versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11 and opentext Asset Management X AMX versions 2021.08, 2021.11, 2022.05, 2022.11. The vulnerability could allow attackers ...

Open redirect

Potential open redirect vulnerability in opentext Service Management Automation X SMAX versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11 and opentext Asset Management X AMX versions 2021.08, 2021.11, 2022.05, 2022.11. The vulnerability could allow attackers ...

Security Bulletin: IBM Automation Decision Services October 2023 - Multiple CVEs addressed

Summary IBM Automation Decision Services is vulnerable to denial of service attacks in third party and open source used in the product for various functions. See full list below. This vulnerability has been addressed. Vulnerability Details CVEID:CVE-2022-25883 DESCRIPTION: Node.js semver package ...

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Rockwell Automation FactoryTalk Services Platform Authorization Issue Vulnerability

Rockwell Automation FactoryTalk Services Platform is a suite of services platforms from Rockwell Automation that provides routine services for applications such as diagnostic information, health monitoring and real-time data access. A security vulnerability exists in Rockwell Automation FactoryTa...

Rockwell Automation FactoryTalk View SE Input Validation Error Vulnerability (CNVD-2024-37628)

Rockwell Automation FactoryTalk View SE is an industrial automation system view interface from Rockwell Automation. A security vulnerability exists in Rockwell Automation FactoryTalk View SE, which can be exploited by a remote attacker to submit a special request that can take the product offline...

CVE-2023-4964: URL Redirection to Untrusted Site

Potential open redirect vulnerability in opentext Service Management Automation X SMAX versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11 and opentext Asset Management X AMX versions 2021.08, 2021.11, 2022.05, 2022.11. The vulnerability could allow attackers ...

Jenkins lambdatest-automation Plugin Information Disclosure

The vulnerability of the Jenkins lambdatest-automation Plugin is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...