IBM Robotic Process Automation vulnerabilities
5 known CVE vulnerabilities in IBM Robotic Process Automation, translated and rated.
- CVE-2023-40370Low
IBM Robotic Process Automation versions 21.0.0 through 21.0.7.1 is vulnerable to information disclosure of script content if the remote REST request policy is enabled.
- CVE-2023-38734Medium
IBM Robotic Process Automation versions 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an LDAP directory.
- CVE-2023-38733Medium
IBM Robotic Process Automation versions 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 may allow an authenticated user to view sensitive information from installation logs.
- CVE-2023-38732Medium
IBM Robotic Process Automation server versions 21.0.0 through 21.0.7 could allow an authenticated user to view sensitive information from application logs.
- CVE-2023-35901Low
IBM Robotic Process Automation versions 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 are vulnerable to client side validation bypass, which could allow invalid changes or values in some fields.