← Back

Robotic Process Automation For Cloud Pak

robotic_process_automation_for_cloud_pak

Vendor: Ibm • 28 CVEs

CVEs (28)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-38710
1Ibm
3Robotic Process Automation
Robotic Process Automation As A ServiceRobotic Process Automation For Cloud Pak
Jun 17, 2026
Nov 3, 2022
N/A· v4
5.3 MEDIUM· v3
N/A· v2
IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version to an unauthorized control sphere information that could aid in further attacks against the system. IBM X-Force ID: 234292.
CVE-2022-38709
1Ibm
1Robotic Process Automation For Cloud Pak
Jun 17, 2026
Oct 6, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 for Cloud Pak is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended f...Show more
IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 for Cloud Pak is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 234291.Show less
CVE-2022-36774
1Ibm
3Robotic Process Automation
Robotic Process Automation As A ServiceRobotic Process Automation For Cloud Pak
Jun 17, 2026
Oct 6, 2022
N/A· v4
5.3 MEDIUM· v3
N/A· v2
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulation of the client proxy configuration. IBM X-Force ID: 233575.
CVE-2022-39168
1Ibm
3Robotic Process Automation
Robotic Process Automation For Cloud PakRobotic Process Automation For Services
Jun 17, 2026
Sep 29, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in upgrade logs. IBM X-Force ID: 235422.
CVE-2022-35280
1Ibm
1Robotic Process Automation For Cloud Pak
Jun 17, 2026
Aug 10, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 230634.
CVE-2022-22490
1Ibm
3Robotic Process Automation
Robotic Process Automation As A ServiceRobotic Process Automation For Cloud Pak
Jun 17, 2026
Aug 10, 2022
N/A· v4
4.9 MEDIUM· v3
N/A· v2
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to obtain sensitive Azure bot credential information. IBM X-Force ID: 226342.
CVE-2022-33953
1Ibm
3Robotic Process Automation
Robotic Process Automation As A ServiceRobotic Process Automation For Cloud Pak
Jun 17, 2026
Jun 24, 2022
N/A· v4
4.6 MEDIUM· v3
2.1 LOW· v2
IBM Robotic Process Automation 21.0.1 and 21.0.2 could allow a user with psychical access to the system to obtain sensitive information due to insufficiently protected access tokens. IBM X-Force ID: 229198.
CVE-2022-22502
1Ibm
3Robotic Process Automation
Robotic Process Automation As A ServiceRobotic Process Automation For Cloud Pak
Jun 17, 2026
Jun 24, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentiall...Show more
IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 227124.Show less