Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRobotic Process Automation (bddc15df-bb85-545e-b6a8-50b36d934df7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-51456 vulnerable 2026-06-08 06:52:12.011697 IBM Robotic Process Automation information disclosure
MEDIUM (5.9)
IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to obtain sensitive data that may be exposed through certain crypto-analytic attacks.
Published: 2025-01-12T13:26:34.770Z
Updated: 2025-01-13T15:15:57.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51448 vulnerable 2026-06-08 06:52:12.001530 IBM Robotic Process Automation privilege escalation
MEDIUM (6.7)
IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to escalate their privileges. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service. A subsequent service or server restart will then run that binary with administrator privilege.
Published: 2025-01-18T15:08:42.484Z
Updated: 2025-01-21T20:58:29.659Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49825 vulnerable 2026-06-08 06:50:14.760259 IBM Robotic Process Automation session fixation
MEDIUM (6.3)
IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0 through 23.0.20 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.
Published: 2025-04-14T14:53:40.800Z
Updated: 2025-09-01T00:54:05.019Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49824 vulnerable 2026-06-08 06:50:14.752445 IBM Robotic Process Automation security bypass
MEDIUM (6.5)
IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validation of client-side security enforcement.
Published: 2025-01-18T15:11:58.522Z
Updated: 2025-01-21T20:58:13.548Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45189 vulnerable 2026-06-08 06:12:42.148843 IBM Robotic Process Automation information disclosure
MEDIUM (6.5)
A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.10, 23.0.0 through 23.0.10 may result in access to client vault credentials. This difficult to exploit vulnerability could allow a low privileged attacker to programmatically access client vault credentials. IBM X-Force ID: 268752.
Published: 2023-11-03T22:51:45.475Z
Updated: 2024-09-05T14:37:23.153Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43058 vulnerable 2026-06-08 06:11:09.861966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40370 vulnerable 2026-06-08 06:09:42.172598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38734 vulnerable 2026-06-08 06:08:18.760764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38733 vulnerable 2026-06-08 06:08:18.760250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38732 vulnerable 2026-06-08 06:08:18.757069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38718 vulnerable 2026-06-08 06:08:18.693894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35901 vulnerable 2026-06-08 06:06:28.104207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35900 vulnerable 2026-06-08 06:06:28.101117 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25680 vulnerable 2026-06-08 05:56:09.624700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23476 vulnerable 2026-06-08 05:56:02.746194 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23468 vulnerable 2026-06-08 05:56:02.699052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22863 vulnerable 2026-06-08 05:54:27.277213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22594 vulnerable 2026-06-08 05:54:26.538745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22593 vulnerable 2026-06-08 05:54:26.537003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22591 vulnerable 2026-06-08 05:54:26.533326 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46773 vulnerable 2026-06-08 05:50:39.417872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43574 vulnerable 2026-06-08 05:49:33.570787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43573 vulnerable 2026-06-08 05:49:33.567568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41740 vulnerable 2026-06-08 05:48:30.904498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41294 vulnerable 2026-06-08 05:48:30.155980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39168 vulnerable 2026-06-08 05:47:18.273803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38710 vulnerable 2026-06-08 05:47:16.921068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38709 vulnerable 2026-06-08 05:47:16.917975 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36774 vulnerable 2026-06-08 05:46:07.734899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35280 vulnerable 2026-06-08 05:46:04.515594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34338 vulnerable 2026-06-08 05:44:52.631051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33953 vulnerable 2026-06-08 05:44:51.844921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33169 vulnerable 2026-06-08 05:44:46.318931 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30616 vulnerable 2026-06-08 05:43:38.672515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30607 vulnerable 2026-06-08 05:43:38.644735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22506 vulnerable 2026-06-08 05:40:53.868843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22505 vulnerable 2026-06-08 05:40:53.868486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22503 vulnerable 2026-06-08 05:40:53.868156 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22502 vulnerable 2026-06-08 05:40:53.867576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22490 vulnerable 2026-06-08 05:40:53.842572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22434 vulnerable 2026-06-08 05:40:53.749973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22433 vulnerable 2026-06-08 05:40:53.747632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22415 vulnerable 2026-06-08 05:40:53.727567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22414 vulnerable 2026-06-08 05:40:53.727187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22413 vulnerable 2026-06-08 05:40:53.724661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22412 vulnerable 2026-06-08 05:40:53.724135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22334 vulnerable 2026-06-08 05:40:53.568883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22319 vulnerable 2026-06-08 05:40:08.208180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.