CVE-2018-1878

IBM Robotic Process Automation with Automation Anywhere 11 could disclose sensitive information in a web request that could aid in future attacks against the system. IBM X-Force ID: 151714...

CVE-2018-1552

IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary code on the system, caused by a missing restriction in which file types can be uploaded to the control room. By uploading a malicious file and tricking a victim to run it, an attack...

CVE-2018-1878

IBM Robotic Process Automation with Automation Anywhere 11 could disclose sensitive information in a web request that could aid in future attacks against the system. IBM X-Force ID: 151714...

CVE-2018-1877

IBM Robotic Process Automation with Automation Anywhere 11 could store highly sensitive information in the form of unencrypted passwords that would be available to a local user. IBM X-Force ID: 151713...

CVE-2018-1876: Insertion of Sensitive Information into Log File

IBM Robotic Process Automation with Automation Anywhere 11 could under certain cases, display the password in a Control Room log file after installation. IBM X-Force ID: 151707...

CVE-2018-1552: Unrestricted Upload of File with Dangerous Type

IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary code on the system, caused by a missing restriction in which file types can be uploaded to the control room. By uploading a malicious file and tricking a victim to run it, an attack...

PT-2018-14632

Name of the Vulnerable Software and Affected Versions IBM Robotic Process Automation with Automation Anywhere version 11 Description The issue concerns the potential display of a password in a Control Room log file under certain conditions after installation. Recommendations For version 11,...

CVE-2018-1877: Cleartext Storage of Sensitive Information

IBM Robotic Process Automation with Automation Anywhere 11 could store highly sensitive information in the form of unencrypted passwords that would be available to a local user. IBM X-Force ID: 151713...

CVE-2018-1878: Exposure of Sensitive Information to an Unauthorized Actor

IBM Robotic Process Automation with Automation Anywhere 11 could disclose sensitive information in a web request that could aid in future attacks against the system. IBM X-Force ID: 151714...

PT-2018-14644

Name of the Vulnerable Software and Affected Versions IBM Robotic Process Automation with Automation Anywhere version 11 Description The issue could disclose sensitive information in a web request, potentially aiding in future attacks against the system. Recommendations For version 11, update to ...

PT-2018-14638

Name of the Vulnerable Software and Affected Versions IBM Robotic Process Automation with Automation Anywhere version 11 Description The issue allows highly sensitive information, such as unencrypted passwords, to be stored and made available to a local user. Recommendations For IBM Robotic Proce...

PT-2018-13064

Name of the Vulnerable Software and Affected Versions IBM Robotic Process Automation with Automation Anywhere versions 10.0 through 11.0 Description The issue allows a remote attacker to execute arbitrary code on the system due to a missing restriction on file types that can be uploaded to the...

Security Bulletin: Remote Code Execution vulnerability in IBM Robotic Process Automation with Automation Anywhere (CVE-2018-1552)

Summary IBM Robotic Process Automation with Automation Anywhere is vulnerable to a remote code execution vulnerability Vulnerability Details CVEID: CVE-2018-1552 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere allows a remote attacker to execute arbitrary code on the system,...

Security Bulletin: Passwords printed to log files in IBM Robotic Process Automation with Automation Anywhere (CVE-2018-1876)

Summary IBM Robotic Process Automation with Automation Anywhere log files may contain plain text password in some cases Vulnerability Details CVEID: CVE-2018-1876 DESCRIPTION: IBM Robotic Process Automation could under certain cases, display the password in a Control Room log file after...

Security Bulletin: Passwords are unencrypted locally in IBM Robotic Process Automation with Automation Anywhere (CVE-2018-1877)

Summary IBM Robotic Process Automation could store highly sensitive information in the form of unencrypted passwords that would be available to a local user. Vulnerability Details CVEID: CVE-2018-1877 DESCRIPTION: IBM Robotic Process Automation could store highly sensitive information in the form...

[SECURITY] Fedora 27 Update: fawkes-1.0.1-9.fc27.1

Fawkes is a component-based software framework for robotic real-time applications for various platforms and domains. It was developed for cognitive robotics real-time applications like soccer and service robotics and supports fast information exchange and efficient combination and coordination of...

IBM Robotic Process Automation with Automation Anywhere Enterprise Cross-Site Scripting Vulnerability (CNVD-2018-20658)

IBM Robotic Process Automation with Automation Anywhere Enterprise is a suite of process automation solutions developed by IBM USA and Automation Anywhere. A cross-site scripting vulnerability exists in IBM Robotic Process Automation with Automation Anywhere Enterprise version 10. A remote attack...

CVE-2018-1812

IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to persistent cross-site scripting, caused by missing escaping of a database field. An attacker that has access to the Control Room database could exploit this vulnerability to execute script in a victim's web...

CVE-2018-1795

IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1812

IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to persistent cross-site scripting, caused by missing escaping of a database field. An attacker that has access to the Control Room database could exploit this vulnerability to execute script in a victim's web...