CVE-2023-35900
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
IBM Robotic Process Automation for Cloud Pak versions 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information, which may be used to determine software vulnerabilities at the operating system level.
Risk Assessment
Disclosure of server version information may lead to an increased risk of attacks on operating systems, posing a threat to organizational security.
Recommendation
It is recommended to update to the latest version of the software to minimize the risk associated with the disclosure of server version information.
Original NVD description (English source)
IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may be used to determine software vulnerabilities at the operating system level. IBM X-Force ID: 259368.