CVE-2023-22594

Published: Jan 18, 2023Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 244075.

Affected (3)

Products: Ibm: Robotic Process Automation, Robotic Process Automation As A Service, Robotic Process Automation For Cloud Pak

Ibm

3 products

Robotic Process Automation

Robotic Process Automation As A Service

Robotic Process Automation For Cloud Pak

Configuration A

3 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Ibm Robotic Process Automation	Before 21.0.5
Ibm Robotic Process Automation As A Service	Before 21.0.5
Ibm Robotic Process Automation For Cloud Pak	Before 21.0.5