CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

IBM Security Bulletins•added 2025/01/28 10:8 p.m.•11 views

Security Bulletin: A vulnerability in IBM Robotic Process Automation may result in privilege escalation (CVE-2024-49824).

Summary IBM Robotic Process Automation could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validation of client-side security enforcement. This bulletin identifies the fixes required to address the vulnerability. Vulnerability Details...

6.5CVSS7AI score0.00313EPSS

Exploits0Affected Software1

NVD•added 2025/01/18 4:15 p.m.•16 views

CVE-2024-49824

IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validation...

6.5CVSS0.00313EPSS

Exploits0References1

Circl•added 2025/01/18 3:19 p.m.•8 views

CVE-2024-49824

creationtimestamp| type| source ---|---|--- 2025-01-18 15:19:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113850029423865331 2025-01-18 15:58:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2298 2025-01-18 16:16:03+00:00| seen|...

6.5CVSS6.5AI score0.00313EPSS

Exploits0References5

CVE•added 2025/01/18 3:11 p.m.•56 views

CVE-2024-49824

IBM Robotic Process Automation (server) and IBM Robotic Process Automation for Cloud Pak are affected by CVE-2024-49824. Affected versions: 21.0.0–21.0.7.18 and 23.0.0–23.0.18. Root cause: improper validation of client-side security enforcement, allowing an authenticated user to perform unauthori...

6.5CVSS6.3AI score0.00313EPSS

Exploits0References1Affected Software2