IBM Robotic Process Automation 23.0.18

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:robotic_process_automation:23.0.18:*:*:*:*:*:*:*

part: a version: 23.0.18 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRobotic Process Automation (bddc15df-bb85-545e-b6a8-50b36d934df7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-51448 vulnerable 2026-06-08 06:52:12.000642 IBM Robotic Process Automation privilege escalation
MEDIUM (6.7)
IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to escalate their privileges. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service. A subsequent service or server restart will then run that binary with administrator privilege.
Published: 2025-01-18T15:08:42.484Z
Updated: 2025-01-21T20:58:29.659Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49824 vulnerable 2026-06-08 06:50:14.750719 IBM Robotic Process Automation security bypass
MEDIUM (6.5)
IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validation of client-side security enforcement.
Published: 2025-01-18T15:11:58.522Z
Updated: 2025-01-21T20:58:13.548Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.