ibm robotic process automation 21.0.1 vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the malicious user to view, add, modify or delete information in the back-end database. IBM X-Force ID: 22302...

Ibm Robotic Process Automation 21.0.1 Ibm Robotic Process Automation 21.0.2 Ibm Robotic Process Automation 21.0.0

6.5

CVSSv3

IBM Robotic Process Automation 21.0.1 up to and including 21.0.5 is vulnerable to insufficiently protecting credentials. Queue Provider credentials are not obfuscated while editing queue provider details. IBM X-Force ID: 247032.

Ibm Robotic Process Automation Ibm Robotic Process Automation As A Service Ibm Robotic Process Automation For Cloud Pak

4.6

CVSSv3

IBM Robotic Process Automation 21.0.1 and 21.0.2 could allow a user with psychical access to the system to obtain sensitive information due to insufficiently protected access tokens. IBM X-Force ID: 229198.

Ibm Robotic Process Automation For Cloud Pak Ibm Robotic Process Automation Ibm Robotic Process Automation As A Service

4.3

CVSSv3

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user to access information from a tenant of which they should not have access. IBM X-Force ID: 219391.

Ibm Robotic Process Automation 21.0.0 Ibm Robotic Process Automation

5.4

CVSSv3

IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Ibm Robotic Process Automation Ibm Robotic Process Automation For Cloud Pak Ibm Robotic Process Automation As A Service

7.5

CVSSv3

"IBM Robotic Process Automation 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to incorrect permission assignment which could allow access to application configurations. IBM X-Force ID: 238679."

Ibm Robotic Process Automation Ibm Robotic Process Automation For Cloud Pak

3.2

CVSSv3

IBM Robotic Process Automation 21.0.1 up to and including 21.0.7 and 23.0.0 up to and including 23.0.1 could allow a user with physical access to the system due to session tokens for not being invalidated after a password reset. IBM X-Force ID: 243710.

Ibm Robotic Process Automation As A Service Ibm Robotic Process Automation

7.5

CVSSv3

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 contains a vulnerability that could allow IBM tenant credentials to be exposed. IBM X-Force ID: 227288.

Ibm Robotic Process Automation

6.5

CVSSv3

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could disclose sensitive information due to improper privilege management for storage provider types. IBM X-Force ID: 229962.

Ibm Robotic Process Automation

6.5

CVSSv3

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to insufficiently protected credentials for users created via a bulk upload. IBM X-Force ID: 228888.

Ibm Robotic Process Automation

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook