CVE-2023-38718

Published: Sep 20, 2023Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

IBM Robotic Process Automation 21.0.0 through 21.0.7.8 could disclose sensitive information from access to RPA scripts, workflows and related data. IBM X-Force ID: 261606.

Affected (4)

Products: Ibm: Robotic Process Automation

Ibm

1 product

Robotic Process Automation

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Robotic Process Automation	From 21.0.0 to 21.0.7.8
Ibm Robotic Process Automation	From 23.0.0 to 23.0.8

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Robotic Process Automation	From 21.0.0 to 21.0.7.8
Ibm Robotic Process Automation	From 23.0.0 to 23.0.8

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/261606

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/7031619

Source: psirt@us.ibm.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/261606

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/7031619

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.