Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm robotic process automation for cloud pak 21.0.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-23468
IBM Robotic Process Automation for Cloud Pak 21.0.1 up to and including 21.0.7.3 and 23.0.0 up to and including 23.0.3 is vulnerable to insufficient security configuration which may allow creation of namespaces within a cluster. IBM X-Force ID: 244500.
Ibm Robotic Process Automation
NA
CVE-2023-22593
IBM Robotic Process Automation for Cloud Pak 21.0.1 up to and including 21.0.7.3 and 23.0.0 up to and including 23.0.3 is vulnerable to security misconfiguration of the Redis container which may provide elevated privileges. IBM X-Force ID: 244074.
Ibm Robotic Process Automation
NA
CVE-2023-25680
IBM Robotic Process Automation 21.0.1 up to and including 21.0.5 is vulnerable to insufficiently protecting credentials. Queue Provider credentials are not obfuscated while editing queue provider details. IBM X-Force ID: 247032.
Ibm Robotic Process AutomationIbm Robotic Process Automation As A ServiceIbm Robotic Process Automation For Cloud Pak
NA
CVE-2023-22592
IBM Robotic Process Automation for Cloud Pak 21.0.1 up to and including 21.0.4 could allow a local user to perform unauthorized actions due to insufficient permission settings. IBM X-Force ID: 244073.
Ibm Robotic Process Automation For Cloud Pak
NA
CVE-2022-43574
"IBM Robotic Process Automation 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to incorrect permission assignment which could allow access to application configurations. IBM X-Force ID: 238679."
Ibm Robotic Process AutomationIbm Robotic Process Automation For Cloud Pak
NA
CVE-2022-42442
IBM Robotic Process Automation for Cloud Pak 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to exposure of the first tenant owner e-mail address to users with access to the container platform. IBM X-Force ID: 238214.
Ibm Robotic Process Automation For Cloud Pak
NA
CVE-2022-38709
IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 for Cloud Pak is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure w...
Ibm Robotic Process Automation For Cloud Pak
2.1
CVSSv2
CVE-2022-33953
IBM Robotic Process Automation 21.0.1 and 21.0.2 could allow a user with psychical access to the system to obtain sensitive information due to insufficiently protected access tokens. IBM X-Force ID: 229198.
Ibm Robotic Process Automation For Cloud PakIbm Robotic Process AutomationIbm Robotic Process Automation As A Service
3.5
CVSSv2
CVE-2022-22502
IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
Ibm Robotic Process AutomationIbm Robotic Process Automation For Cloud PakIbm Robotic Process Automation As A Service
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereferenceCVE-2023-52689CVE-2024-23803client sideCVE-2023-52696information disclosureCVE-2024-35843CVE-2024-27130CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook