IBM Robotic Process Automation 23.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:robotic_process_automation:23.0.0:*:*:*:*:*:*:*
part: a version: 23.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Robotic Process Automation (bddc15df-bb85-545e-b6a8-50b36d934df7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-51457 |
vulnerable | 2026-06-08 06:52:12.013781 |
IBM Robotic Process Automation for Cloud Pak cross-site scripting
MEDIUM (4.4)
IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-01-22T16:36:54.641Z
Updated: 2025-02-18T19:38:42.714Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51456 |
vulnerable | 2026-06-08 06:52:12.010325 |
IBM Robotic Process Automation information disclosure
MEDIUM (5.9)
IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to obtain sensitive data that may be exposed through certain crypto-analytic attacks.
Published: 2025-01-12T13:26:34.770Z
Updated: 2025-01-13T15:15:57.927Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51448 |
vulnerable | 2026-06-08 06:52:11.999944 |
IBM Robotic Process Automation privilege escalation
MEDIUM (6.7)
IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to escalate their privileges. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service. A subsequent service or server restart will then run that binary with administrator privilege.
Published: 2025-01-18T15:08:42.484Z
Updated: 2025-01-21T20:58:29.659Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49825 |
vulnerable | 2026-06-08 06:50:14.754750 |
IBM Robotic Process Automation session fixation
MEDIUM (6.3)
IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0 through 23.0.20 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.
Published: 2025-04-14T14:53:40.800Z
Updated: 2025-09-01T00:54:05.019Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49824 |
vulnerable | 2026-06-08 06:50:14.749936 |
IBM Robotic Process Automation security bypass
MEDIUM (6.5)
IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and
IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18
could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validation of client-side security enforcement.
Published: 2025-01-18T15:11:58.522Z
Updated: 2025-01-21T20:58:13.548Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38734 |
vulnerable | 2026-06-08 06:08:18.762401 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46773 |
vulnerable | 2026-06-08 05:50:39.418828 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.