Lucene search
+L

787 matches found

CNVD
CNVD
added 2018/06/12 12:00 a.m.8 views

IBM Robotic Process Automation with Automation Anywhere Arbitrary Command Execution Vulnerability

IBM Robotic Process Automation with Automation Anywhere is a process automation solution developed by IBM USA and Automation Anywhere. A security vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 10.0, which stems from the program's failure to properly encode...

8CVSS7.1AI score0.02006EPSS
SaveExploits0References1
Prion
Prion
added 2018/06/07 2:29 p.m.23 views

Design/Logic Flaw

IBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to execute arbitrary code on the system, caused by improper output encoding in an CSV export. By persuading a victim to download the CSV export, to open it in Microsoft Excel and to confirm the two security...

5.1CVSS7.6AI score0.02006EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2018/06/07 2:29 p.m.25 views

CVE-2018-1547

IBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to execute arbitrary code on the system, caused by improper output encoding in an CSV export. By persuading a victim to download the CSV export, to open it in Microsoft Excel and to confirm the two security...

8CVSS8AI score0.02006EPSS
SaveExploits0References3
CVE
CVE
added 2018/06/07 2:00 p.m.47 views

CVE-2018-1514

IBM Robotic Process Automation with Automation Anywhere 10.0 is vulnerable to cross‑site request forgery (CVE-2018-1514). The issue arises from CSRF allowing a remote attacker to trigger malicious actions transmitted from a trusted user session. Affected product/version: IBM Robotic Process Autom...

8.8CVSS8.4AI score0.00527EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2017/12/20 6:29 p.m.23 views

CVE-2017-1751

IBM Robotic Process Automation with Automation Anywhere 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. I...

5.4CVSS5.2AI score0.00694EPSS
SaveExploits0References3
CVE
CVE
added 2017/12/20 6:00 p.m.63 views

CVE-2017-1751

CVE-2017-1751 affects IBM Robotic Process Automation with Automation Anywhere 10.0.0. The issue is a cross-site scripting vulnerability in the Web UI that lets an attacker embed arbitrary JavaScript, potentially exposing credentials within a trusted session. The root cause is insufficient input f...

5.4CVSS5.2AI score0.00694EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2017/12/20 12:00 a.m.14 views

IBM RPA with Automation Anywhere Cross-Site Scripting Vulnerability

IBM Robotic Process Automation with Automation Anywhere is a process automation solution developed by IBM USA and Automation Anywhere. The cross-site scripting vulnerability in IBM Robotic Process Automation with Automation Anywhere version 10.0.0.0 stems from the program failing to properly filt...

5.4CVSS6.4AI score0.00694EPSS
SaveExploits0References1
Rows per page
Query Builder