CVE-2023-35901

Published: Jul 17, 2023Modified: Nov 21, 2024

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

IBM Robotic Process Automation 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 is vulnerable to client side validation bypass which could allow invalid changes or values in some fields. IBM X-Force ID: 259380.

Affected (5)

Products: Ibm: Robotic Process Automation, Robotic Process Automation As A Service, Robotic Process Automation For Cloud Pak

Ibm

3 products

Robotic Process Automation

Robotic Process Automation As A Service

Robotic Process Automation For Cloud Pak

Configuration A

5 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Ibm Robotic Process Automation	From 21.0.0 to 21.0.7.6
Ibm Robotic Process Automation	From 23.0.0 to 23.0.6
Ibm Robotic Process Automation As A Service	From 21.0.0 to 21.0.7.6
Ibm Robotic Process Automation For Cloud Pak	From 21.0.0 to 21.0.7.6
Ibm Robotic Process Automation For Cloud Pak	From 23.0.0 to 23.0.6