5.4
Moyenne
CVE-2022-22502 IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to cross-site scripting
Description
IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 227124.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Robotic Process Automation 21.0 | 21.0.1 → 21.0.2 | Pas de correctif indiqué |
Autres CVE de Robotic Process Automation
Les 45 CVE de Robotic Process Automation →
CVE-2024-49825
IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0…
6.3
Moyenne
CVE-2024-49824
IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation…
6.5
Moyenne
CVE-2024-51448
IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to…
6.7
Moyenne
CVE-2024-51456
IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to…
5.9
Moyenne