CVE-2018-1878

IBM Robotic Process Automation with Automation Anywhere 11 could disclose sensitive information in a web request that could aid in future attacks against the system. IBM X-Force ID: 151714...

CVE-2018-1877

IBM Robotic Process Automation with Automation Anywhere 11 could store highly sensitive information in the form of unencrypted passwords that would be available to a local user. IBM X-Force ID: 151713...

CVE-2018-1878

IBM Robotic Process Automation with Automation Anywhere 11 could disclose sensitive information in a web request that could aid in future attacks against the system. IBM X-Force ID: 151714...

CVE-2018-1552

IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary code on the system, caused by a missing restriction in which file types can be uploaded to the control room. By uploading a malicious file and tricking a victim to run it, an attack...

Security Bulletin: Passwords printed to log files in IBM Robotic Process Automation with Automation Anywhere (CVE-2018-1876)

Summary IBM Robotic Process Automation with Automation Anywhere log files may contain plain text password in some cases Vulnerability Details CVEID: CVE-2018-1876 DESCRIPTION: IBM Robotic Process Automation could under certain cases, display the password in a Control Room log file after...

Security Bulletin: Remote Code Execution vulnerability in IBM Robotic Process Automation with Automation Anywhere (CVE-2018-1552)

Summary IBM Robotic Process Automation with Automation Anywhere is vulnerable to a remote code execution vulnerability Vulnerability Details CVEID: CVE-2018-1552 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere allows a remote attacker to execute arbitrary code on the system,...

Security Bulletin: Passwords are unencrypted locally in IBM Robotic Process Automation with Automation Anywhere (CVE-2018-1877)

Summary IBM Robotic Process Automation could store highly sensitive information in the form of unencrypted passwords that would be available to a local user. Vulnerability Details CVEID: CVE-2018-1877 DESCRIPTION: IBM Robotic Process Automation could store highly sensitive information in the form...

[SECURITY] Fedora 27 Update: fawkes-1.0.1-9.fc27.1

Fawkes is a component-based software framework for robotic real-time applications for various platforms and domains. It was developed for cognitive robotics real-time applications like soccer and service robotics and supports fast information exchange and efficient combination and coordination of...

IBM Robotic Process Automation with Automation Anywhere Enterprise Cross-Site Scripting Vulnerability (CNVD-2018-20658)

IBM Robotic Process Automation with Automation Anywhere Enterprise is a suite of process automation solutions developed by IBM USA and Automation Anywhere. A cross-site scripting vulnerability exists in IBM Robotic Process Automation with Automation Anywhere Enterprise version 10. A remote attack...

CVE-2018-1812

IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to persistent cross-site scripting, caused by missing escaping of a database field. An attacker that has access to the Control Room database could exploit this vulnerability to execute script in a victim's web...

CVE-2018-1795

IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1812

IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to persistent cross-site scripting, caused by missing escaping of a database field. An attacker that has access to the Control Room database could exploit this vulnerability to execute script in a victim's web...

Cross site scripting

IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to persistent cross-site scripting, caused by missing escaping of a database field. An attacker that has access to the Control Room database could exploit this vulnerability to execute script in a victim's web...

CVE-2018-1795

The CVE-2018-1795 entry concerns IBM Robotic Process Automation with Automation Anywhere Enterprise 10 (V10.0), where a cross-site scripting vulnerability exists in the Web UI that can allow injection of arbitrary JavaScript code and potentially lead to credentials disclosure within a trusted ses...

Security Bulletin: Cross-site scripting vulnerability in IBM Robotic Process Automation with Automation Anywhere (CVE-2018-1795)

Summary IBM Robotic Process Automation with Automation Anywhere is vulnerable to a cross-site scripting vulnerability Vulnerability Details CVEID: CVE-2018-1795 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere Enterprise is vulnerable to cross-site scripting. This vulnerabilit...

Security Bulletin: Cross-site scripting vulnerability in IBM Robotic Process Automation with Automation Anywhere (CVE-2018-1812)

Summary IBM Robotic Process Automation with Automation Anywhere is vulnerable to a cross-site scripting vulnerability Vulnerability Details CVEID: CVE-2018-1812 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere Enterprise is vulnerable to persistent cross-site scripting, caused...

robotic-fish.net XSS vulnerability

Open Bug Bounty ID: OBB-644174 Description| Value ---|--- Affected Website:| robotic-fish.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Tivoli Composite Application Manager for Transactions (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects IBM Tivoli Composite Application Manager for Transactions. Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitive information,...

Security Bulletin: Remote Code Execution vulnerability in IBM Robotic Process Automation with Automation Anywhere (CVE-2018-1547)

Summary IBM Robotic Process Automation with Automation Anywhere is vulnerable to a remote code execution vulnerability Vulnerability Details CVEID: CVE-2018-1547 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere could allow a remote attacker to execute arbitrary code on the...

Security Bulletin: Cross-Site Request Forgery vulnerability in IBM Robotic Process Automation with Automation Anywhere (CVE-2018-1514)

Summary IBM Robotic Process Automation with Automation Anywhere is vulnerable to cross-site request forgery. Vulnerability Details CVEID: CVE-2018-1514 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere is vulnerable to cross-site request forgery which could allow an attacker to...