IBM Robotic Process Automation vulnerabilities

IBM Robotic Process Automation versions 21.0.0 through 21.0.7.1 is vulnerable to information disclosure of script content if the remote REST request policy is enabled.

IBM Robotic Process Automation versions 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an LDAP directory.

IBM Robotic Process Automation versions 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 may allow an authenticated user to view sensitive information from installation logs.

IBM Robotic Process Automation server versions 21.0.0 through 21.0.7 could allow an authenticated user to view sensitive information from application logs.

IBM Robotic Process Automation versions 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 are vulnerable to client side validation bypass, which could allow invalid changes or values in some fields.