Vulnerabilities > IBM > Robotic Process Automation FOR Cloud PAK

DATE CVE VULNERABILITY TITLE RISK
2023-01-18 CVE-2023-22594 Unspecified vulnerability in IBM products
IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting.
network
low complexity
ibm
5.4
2023-01-18 CVE-2023-22863 Unspecified vulnerability in IBM products
IBM Robotic Process Automation 20.12.0 through 21.0.2 defaults to HTTP in some RPA commands when the prefix is not explicitly specified in the URL.
network
high complexity
ibm
5.9
2023-01-05 CVE-2022-41740 Cleartext Storage of Sensitive Information vulnerability in IBM products
IBM Robotic Process Automation 20.12 through 21.0.6 could allow an attacker with physical access to the system to obtain highly sensitive information from system memory.
low complexity
ibm CWE-312
4.6
2023-01-05 CVE-2022-43573 Unspecified vulnerability in IBM products
IBM Robotic Process Automation 20.12 through 21.0.6 is vulnerable to exposure of the name and email for the creator/modifier of platform level objects.
network
low complexity
ibm
5.3
2023-01-05 CVE-2022-43844 Unspecified vulnerability in IBM Robotic Process Automation for Cloud PAK
IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken access control.
network
low complexity
ibm
8.8
2022-11-03 CVE-2022-38710 Unspecified vulnerability in IBM products
IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version to an unauthorized control sphere information that could aid in further attacks against the system.
network
low complexity
ibm
5.3
2022-11-03 CVE-2022-42442 Unspecified vulnerability in IBM Robotic Process Automation for Cloud PAK
IBM Robotic Process Automation for Cloud Pak 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to exposure of the first tenant owner e-mail address to users with access to the container platform.
local
low complexity
ibm
3.3
2022-11-03 CVE-2022-43574 Incorrect Default Permissions vulnerability in IBM products
"IBM Robotic Process Automation 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to incorrect permission assignment which could allow access to application configurations.
network
low complexity
ibm CWE-276
7.5
2022-10-06 CVE-2022-36774 Unspecified vulnerability in IBM products
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulation of the client proxy configuration.
high complexity
ibm
5.3
2022-10-06 CVE-2022-38709 Cross-site Scripting vulnerability in IBM Robotic Process Automation for Cloud PAK
IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 for Cloud Pak is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
6.1