4.6
Medium
CVE-2023-22594 IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting
Description
IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 244075.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Robotic Process Automation for Cloud Pak 20.12 | 20.12.0 → < 21.0.4 | 21.0.4 |
Other CVEs of Robotic Process Automation for Cloud Pak
The 12 CVEs of Robotic Process Automation for Cloud Pak →
CVE-2024-49825
IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0…
6.3
Medium
CVE-2024-51457
IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 is vulnerable to…
4.4
Medium
CVE-2024-49824
IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation…
6.5
Medium
CVE-2023-45189
A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through…
6.5
Medium