979 matches found
CVE-2022-33169
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to insufficiently protected credentials for users created via a bulk upload. IBM X-Force ID: 228888...
CVE-2022-33169
IBM Robotic Process Automation (RPA) versions 21.0.0–21.0.2 are vulnerable to insufficiently protected credentials for users created via bulk upload. The IBM Security Bulletin (and associated CVE-2022-33169 records) confirm affected products and affected versions: IBM RPA < 21.0.3, IBM RPA for...
CVE-2022-30616
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to elevate their privilege to platform administrator through manipulation of APIs. IBM X-Force ID: 227978...
CVE-2022-22505
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 contains a vulnerability that could allow IBM tenant credentials to be exposed. IBM X-Force ID: 227288...
CVE-2022-22505
CVE-2022-22505 affects IBM Robotic Process Automation prior to version 21.0.3 (i.e., 21.0.0–21.0.2). The IBM Security Bulletin documents that this vulnerability could expose IBM tenant credentials. The CVSS scores in public records show a base impact on confidentiality (C:H) with no availability/...
CVE-2022-22334
IBM Robotic Process Automation is affected by CVE-2022-22334 through versions: on-premises 21.0.0, 21.0.1, 21.0.2 prior to the fixes; and RPA as a Service across all. The vulnerability allows a user to access information from a tenant they should not access (information disclosure). Remediation p...
CVE-2022-22334
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user to access information from a tenant of which they should not have access. IBM X-Force ID: 219391...
PT-2022-20208 · Ibm · Ibm Robotic Process Automation
Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation versions 21.0.0 through 21.0.2 Description: The issue allows a privileged user to elevate their privilege to platform administrator through manipulation of APIs. Recommendations: For versions 21.0.0 through...
PT-2022-15478 · Ibm · Ibm Robotic Process Automation
Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation versions 21.0.0 through 21.0.2 Description: The issue could allow IBM tenant credentials to be exposed. Recommendations: For versions 21.0.0 through 21.0.2, at the moment, there is no information about a newer...
PT-2022-15373 · Ibm · Ibm Robotic Process Automation
Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation versions 21.0.0 through 21.0.2 Description: The issue allows a user to access information from a tenant of which they should not have access. Recommendations: For versions 21.0.0 through 21.0.2, at the moment,...
PT-2022-22138 · Ibm · Ibm Robotic Process Automation
Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation versions 21.0.0 through 21.0.2 Description: The issue is related to improper privilege management for storage provider types, which could lead to the disclosure of sensitive information. Recommendations: For...
Security Bulletin: IBM Robotic Process Automation is vulnerable to a man-in-the-middle due to ssh.net (CVE-2022-29245)
Summary ssh.net is used by IBM Robotic Process Automation as part of the secure communications. CVE-2022-29245. The fix includes ssh.net 2020.0.2.0 Vulnerability Details CVEID:CVE-2022-29245 DESCRIPTION: SSH.NET is vulnerable to a man-in-the-middle attack, caused by the use of a weak cryptographi...
CVE-2022-33169
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to insufficiently protected credentials for users created via a bulk upload. IBM X-Force ID: 228888...
CVE-2022-22505
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 contains a vulnerability that could allow IBM tenant credentials to be exposed. IBM X-Force ID: 227288...
CVE-2022-34338
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could disclose sensitive information due to improper privilege management for storage provider types. IBM X-Force ID: 229962...
CVE-2022-22334
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user to access information from a tenant of which they should not have access. IBM X-Force ID: 219391...
CVE-2022-30616
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to elevate their privilege to platform administrator through manipulation of APIs. IBM X-Force ID: 227978...
IBM Robotic Process Automation Access Control Error Vulnerability
IBM Robotic Process Automation is a robotic process automation product from IBM USA. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. An Access Control Error vulnerability exists in IBM Robotic Process Automation version 21.0.0, 21.0.1, and...
