Skip to content

Known vulnerabilities in IBM Robotic Process Automation

Is your version affected?

CVE Summary Score Published
CVE-2022-36774 IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through… 6.5 Medium Oct 6, 2022
CVE-2022-22503 IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim 6.1 Medium Oct 6, 2022
CVE-2022-39168 IBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in upgrade logs 4.6 Medium Sep 29, 2022
CVE-2022-35280 IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have strong passwords by… 4.6 Medium Aug 10, 2022
CVE-2022-22490 IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to obtain sensitive Azure bot… 4.4 Medium Aug 10, 2022
CVE-2022-34338 IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could disclose sensitive information due to improper privilege… 5.8 Medium Jul 31, 2022
CVE-2022-33169 IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to insufficiently protected credentials for… 5.3 Medium Jul 31, 2022
CVE-2022-30616 IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to elevate their privilege to… 8.0 High Jul 31, 2022
CVE-2022-22505 IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 contains a vulnerability that could allow IBM tenant… 4.6 Medium Jul 31, 2022
CVE-2022-22334 IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user to access information from a tenant of… 4.2 Medium Jul 31, 2022
CVE-2022-22412 IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user with access to the local host (client… 4.2 Medium Jul 26, 2022
CVE-2022-33953 IBM Robotic Process Automation 21.0.1 and 21.0.2 could allow a user with psychical access to the system to obtain… 4.6 Medium Jun 24, 2022
CVE-2022-22502 IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to cross-site scripting 5.4 Medium Jun 24, 2022
CVE-2022-22414 IBM Robotic Process Automation 21.0.2 could allow a local user to obtain sensitive web service configuration credentials… 5.1 Medium Jun 20, 2022
CVE-2022-30607 IBM Robotic Process Automation 20.10.0, 20.12.5, 21.0.0, 21.0.1, and 21.0.2 contains a vulnerability that could allow… 2.7 Low Jun 17, 2022
CVE-2022-22413 IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to SQL injection 4.2 Medium May 12, 2022
CVE-2022-22319 IBM Robotic Process Automation 21.0.1 could allow a register user on the system to physically delete a queue that… 4.6 Medium May 9, 2022
CVE-2022-22434 IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user with physical access to create an API… 4.2 Medium May 5, 2022
CVE-2022-22433 IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to External Service Interaction attack, caused by… 2.7 Low May 5, 2022
CVE-2022-22415 A vulnerability exists where an IBM Robotic Process Automation 21.0.1 regular user is able to obtain view-only access to… 4.3 Medium May 5, 2022

Other IBM products