Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm robotic process automation 21.0.3 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2022-39168
IBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in upgrade logs. IBM X-Force ID: 235422.
Ibm Robotic Process Automation For Services 21.0.3Ibm Robotic Process Automation For Services 21.0.4Ibm Robotic Process Automation For Cloud Pak 21.0.4Ibm Robotic Process Automation For Cloud Pak 21.0.3Ibm Robotic Process Automation 21.0.4Ibm Robotic Process Automation 21.0.3
7.5
CVSSv3
CVE-2022-43574
"IBM Robotic Process Automation 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to incorrect permission assignment which could allow access to application configurations. IBM X-Force ID: 238679."
Ibm Robotic Process AutomationIbm Robotic Process Automation For Cloud Pak
6.5
CVSSv3
CVE-2022-41294
IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api. IBM X-Force ID: 236807.
Ibm Robotic Process Automation
3.3
CVSSv3
CVE-2022-42442
IBM Robotic Process Automation for Cloud Pak 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to exposure of the first tenant owner e-mail address to users with access to the container platform. IBM X-Force ID: 238214.
Ibm Robotic Process Automation For Cloud Pak
8.8
CVSSv3
CVE-2022-43844
IBM Robotic Process Automation for Cloud Pak 20.12 up to and including 21.0.3 is vulnerable to broken access control. A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak. IBM X-Force ID: 239081.
Ibm Robotic Process Automation For Cloud Pak
6.1
CVSSv3
CVE-2022-38709
IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 for Cloud Pak is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure w...
Ibm Robotic Process Automation For Cloud Pak
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-35229privilege escalationlocal usersCVE-2024-5405CVE-2024-27842CVE-2024-5274CVE-2024-5378CVE-2024-34152hard-coded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook