Robotic Process Automation vulnerabilities

6 known vulnerabilities in Robotic Process Automation from IBM. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Robotic Process Automation: Improper Privilege Management

  CVE-2023-38734Aug 22, 2023IBM

  IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an LDAP directory. IBM X-Force ID: 262481.

• 7.8 High severity

  Robotic Process Automation for Cloud Pak: Incorrect Authorization

  CVE-2023-22593Jun 27, 2023IBM

  IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to security misconfiguration of the Redis container which may provide elevated privileges. IBM X-Force ID: 244074.

• 7.5 High severity

  IBM Robotic Process Automation: Incorrect Default Permissions

  CVE-2022-43574Nov 3, 2022IBM Robotic Process Automation

  "IBM Robotic Process Automation 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to incorrect permission assignment which could allow access to application configurations. IBM X-Force ID: 238679."

• 9.8 Critical severity

  Robotic Process Automation: Weak Password Requirements

  CVE-2022-35280Aug 10, 2022IBM

  IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 230634.

• 9.8 Critical severity

  Robotic Process Automation: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-22413May 12, 2022IBMEPSS 1.3%

  IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-F

• 7.5 High severity

  IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to External Service Interaction…

  CVE-2022-22433May 5, 2022IBMEPSS 1.04%

  IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS