Security Bulletin: IBM Robotic Process Automation Forgot-Password functionality is vulnerable to Brute-Force attacks (CVE-2019-4336)

Summary IBM Robotic Process Automation Forgot-Password functionality is vulnerable to Brute-Force attacks Vulnerability Details CVEID: CVE-2019-4336 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere uses an inadequate account lockout setting that could allow a remote attacker t...

CVE-2019-11875

In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate privileges. The vulnerability allows for abusing the application for fraud or unauthorized access to certain information. The attack requires a valid user...

IBM Robotic Process Automation with Automation Anywhere Cross-Site Scripting Vulnerability

IBM Robotic Process Automation with Automation Anywhere is a suite of process automation solutions from IBM USA. A cross-site scripting vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 11.0, which can be exploited by remote attackers to inject arbitrary...

CVE-2018-1908

IBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2018-1908

IBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

Security Bulletin: Cross-site scripting vulnerability in IBM Robotic Process Automation with Automation Anywhere (CVE-2018-1908)

Summary IBM Robotic Process Automation with Automation Anywhere is vulnerable to cross-site scripting Vulnerability Details CVEID: CVE-2018-1908 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere is vulnerable to cross-site scripting. This vulnerability allows users to embed...

Design/Logic Flaw

IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to upload arbitrary files to the system. IBM X-Force ID: 155008...

CVE-2018-2006

IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to upload arbitrary files to the system. IBM X-Force ID: 155008...

CVE-2018-2006

IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to upload arbitrary files to the system. IBM X-Force ID: 155008...

IBM Robotic Process Automation with Automation Anywhere Path Traversal Vulnerability

IBM Robotic Process Automation with Automation Anywhere is a suite of process automation solutions from IBM USA. A path traversal vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 11.0. A remote attacker can send a path traversal vulnerability by sending a...

Security Bulletin: Directory traversal vulnerability in IBM Robotic Process Automation with Automation Anywhere (CVE-2018-2006)

Summary IBM Robotic Process Automation with Automation Anywhere is vulnerable to directory traversal Vulnerability Details CVEID: CVE-2018-2006 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere could allow a remote attacker to traverse directories on the system. An attacker cou...

IBM Robotic Process Automation with Automation Anywhere Remote Code Execution Vulnerability

IBM Robotic Process Automation with Automation Anywhere is a process automation solution developed by IBM USA and Automation Anywhere. A remote code execution vulnerability exists in IBM Robotic Process Automation with Automation Anywhere versions 10.0 and 11.0, which stems from the program not...

IBM Robotic Process Automation with Automation Anywhere Information Disclosure Vulnerability (CNVD-2018-22535)

IBM Robotic Process Automation with Automation Anywhere is a process automation solution developed by IBM USA and Automation Anywhere. A security vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 11.0. An attacker could exploit the vulnerability to obtain...

IBM Robotic Process Automation with Automation Anywhere Information Disclosure Vulnerability (CNVD-2018-22536)

IBM Robotic Process Automation with Automation Anywhere is a process automation solution developed by IBM USA and Automation Anywhere. A security vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 11.0. An attacker could exploit the vulnerability to obtain...

IBM Robotic Process Automation with Automation Anywhere Information Disclosure Vulnerability

IBM Robotic Process Automation with Automation Anywhere is a process automation solution developed by IBM USA and Automation Anywhere. A security vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 11.0, which stems from a log file containing passwords in...

CVE-2018-1552

IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary code on the system, caused by a missing restriction in which file types can be uploaded to the control room. By uploading a malicious file and tricking a victim to run it, an attack...

CVE-2018-1876

IBM Robotic Process Automation with Automation Anywhere 11 could under certain cases, display the password in a Control Room log file after installation. IBM X-Force ID: 151707...

CVE-2018-1876

IBM Robotic Process Automation with Automation Anywhere 11 could under certain cases, display the password in a Control Room log file after installation. IBM X-Force ID: 151707...

CVE-2018-1552

IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary code on the system, caused by a missing restriction in which file types can be uploaded to the control room. By uploading a malicious file and tricking a victim to run it, an attack...

CVE-2018-1877

IBM Robotic Process Automation with Automation Anywhere 11 could store highly sensitive information in the form of unencrypted passwords that would be available to a local user. IBM X-Force ID: 151713...