Code injection

IBM Robotic Process Automation 20.12 through 21.0.6 is vulnerable to exposure of the name and email for the creator/modifier of platform level objects. IBM X-Force ID: 238678...

CVE-2022-43573

CVE-2022-43573 affects IBM Robotic Process Automation (RPA) versions 20.12–21.0.6. The root cause is exposure of the name and email of the creator/modifier for platform‑level objects, causing an information disclosure with confidentiality impact described as low (CVSS base 5.3/3.1 in alternative ...

CVE-2022-41740

Summary: CVE-2022-41740 affects IBM Robotic Process Automation (versions 20.12–21.0.6). A physically proximate attacker could obtain highly sensitive information from system memory. The vulnerability has a CVSSv3.1 base score of 4.6 (Medium). Affected software: IBM Robotic Process Automation (non...

CVE-2022-43844 IBM Robotic Process Automation for Cloud Pak session fixation

IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken access control. A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak. IBM X-Force ID: 239081...

CVE-2022-43844

CVE-2022-43844 affects IBM Robotic Process Automation for Cloud Pak versions 20.12–21.0.3. The root cause is a broken access control that prevents correct redirection to the platform logout screen upon logout. Public sources in the connected documents confirm the vulnerability in this product/ver...

CVE-2020-35473

CVE-2020-35473 describes an information‑leakage vulnerability in Bluetooth Low Energy advertising scan responses (including extended scan responses) that can identify devices using Resolvable Private Addressing (RPA). Affected are Bluetooth Core Specifications 4.0–5.2 and extended scan responses ...

IBM Robotic Process Automation Information Disclosure Vulnerability (CNVD-2022-77505)

IBM Robotic Process Automation is a robotic process automation product from IBM of America, Inc. It can help you automate more business and IT processes at scale with the ease and speed of traditional RPA.IBM Robotic Process Automation is vulnerable to information disclosure. An attacker could us...

CVE-2022-38710

IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version to an unauthorized control sphere information that could aid in further attacks against the system. IBM X-Force ID: 234292...

Information disclosure

"IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version information that could aid in further attacks against the system. IBM X-Force ID: 234292."...

CVE-2022-38710

IBM Robotic Process Automation (RPA) versions 21.0.1 and 21.0.2 are vulnerable to information disclosure of sensitive version details, which could aid attackers in further compromising the system. Affected products/versions include IBM RPA < 21.0.3, IBM RPA as a Service < 21.0.3, and IBM RP...

CVE-2022-43574

CVE-2022-43574 affects IBM Robotic Process Automation (RPA) versions older than 21.0.6. The issue is an incorrect permission assignment that could allow unauthorized access to application configurations. The Red Hat IBM Security Bulletin confirms the vulnerability details, including the affected ...

CVE-2022-42442

CVE-2022-42442 affects IBM Robotic Process Automation for Cloud Pak, versions

CVE-2022-41294

IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api. IBM X-Force ID: 236807...

CVE-2022-36774

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulation of the client proxy configuration. IBM X-Force ID: 233575...

Code injection

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulation of the client proxy configuration. IBM X-Force ID: 233575...

CVE-2022-22503

IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...

CVE-2022-38709

CVE-2022-38709 affects IBM Robotic Process Automation for Cloud Pak versions

CVE-2022-36774

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulation of the client proxy configuration. IBM X-Force ID: 233575...

CVE-2022-36774

IBM Robotic Process Automation (IBM RPA) is affected by CVE-2022-36774 for versions

CVE-2022-22503

CVE-2022-22503 affects IBM Robotic Process Automation prior to 21.0.1. A remote attacker could hijack the victim’s clicking action by persuading them to visit a malicious site, potentially enabling further attacks. CVSS base score 6.1 (NETWORK, UI:R, S:C, C:L/I:L). Remediation: upgrade to IBM Rob...