Skip to content

Known vulnerabilities in IBM Robotic Process Automation

Is your version affected?

CVE Summary Score Published
CVE-2024-49825 IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0… 6.3 Medium Apr 14, 2025
CVE-2024-49824 IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation… 6.5 Medium Jan 18, 2025
CVE-2024-51448 IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to… 6.7 Medium Jan 18, 2025
CVE-2024-51456 IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to… 5.9 Medium Jan 12, 2025
CVE-2022-33954 IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 could allow a user with psychical access to the system to… 4.6 Medium Dec 19, 2024
CVE-2022-22506 IBM Robotic Process Automation 21.0.2 contains a vulnerability that could allow user ids may be exposed across tenants 4.6 Medium Feb 12, 2024
CVE-2023-45189 A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through… 6.5 Medium Nov 3, 2023
CVE-2023-43058 IBM Robotic Process Automation 23.0.9 is vulnerable to privilege escalation that affects ownership of projects 5.3 Medium Oct 6, 2023
CVE-2023-38718 IBM Robotic Process Automation 21.0.0 through 21.0.7.8 could disclose sensitive information from access to RPA… 3.7 Low Sep 20, 2023
CVE-2023-40370 IBM Robotic Process Automation 21.0.0 through 21.0.7.1 runtime is vulnerable to information disclosure of script content… 3.7 Low Aug 22, 2023
CVE-2023-38733 IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 server could allow an authenticated… 4.3 Medium Aug 22, 2023
CVE-2023-38734 IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege… 6.6 Medium Aug 22, 2023
CVE-2023-38732 IBM Robotic Process Automation 21.0.0 through 21.0.7 server could allow an authenticated user to view sensitive… 4.3 Medium Aug 22, 2023
CVE-2023-23476 IBM Robotic Process Automation 21.0.0 through 21.0.7.latest is vulnerable to unauthorized access to data due to… 3.1 Low Aug 2, 2023
CVE-2023-35900 IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to… 4.3 Medium Jul 19, 2023
CVE-2023-35901 IBM Robotic Process Automation 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 is vulnerable to client side validation… 2.7 Low Jul 16, 2023
CVE-2023-22591 IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user with physical access… 3.9 Low Mar 15, 2023
CVE-2022-46773 IBM Robotic Process Automation 21.0.0 - 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for… 4.3 Medium Mar 15, 2023
CVE-2023-25680 IBM Robotic Process Automation 21.0.1 through 21.0.5 is vulnerable to insufficiently protecting credentials 4.2 Medium Mar 15, 2023
CVE-2023-22863 IBM Robotic Process Automation 20.12.0 through 21.0.2 defaults to HTTP in some RPA commands when the prefix is not… 5.9 Medium Jan 18, 2023
CVE-2022-43573 IBM Robotic Process Automation 20.12 through 21.0.6 is vulnerable to exposure of the name and email for the… 3.1 Low Jan 5, 2023
CVE-2022-41740 IBM Robotic Process Automation 20.12 through 21.0.6 could allow an attacker with physical access to the system to obtain… 4.6 Medium Jan 5, 2023
CVE-2022-38710 IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version to an unauthorized control sphere… 5.3 Medium Nov 3, 2022
CVE-2022-41294 IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing… 6.5 Medium Oct 6, 2022
CVE-2022-38709 IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 for Cloud Pak is vulnerable to cross-site scripting 6.1 Medium Oct 6, 2022

Other IBM products