Robotic Process Automation For Cloud Pak
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Robotic Process Automation For Cloud Pak (e8ce2cd5-d60d-5879-a94a-dbf681a7403b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-51457 |
vulnerable | 2026-06-08 06:52:12.015030 |
IBM Robotic Process Automation for Cloud Pak cross-site scripting
MEDIUM (4.4)
IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-01-22T16:36:54.641Z
Updated: 2025-02-18T19:38:42.714Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49825 |
vulnerable | 2026-06-08 06:50:14.760365 |
IBM Robotic Process Automation session fixation
MEDIUM (6.3)
IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0 through 23.0.20 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.
Published: 2025-04-14T14:53:40.800Z
Updated: 2025-09-01T00:54:05.019Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49824 |
vulnerable | 2026-06-08 06:50:14.751643 |
IBM Robotic Process Automation security bypass
MEDIUM (6.5)
IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and
IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18
could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validation of client-side security enforcement.
Published: 2025-01-18T15:11:58.522Z
Updated: 2025-01-21T20:58:13.548Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45189 |
vulnerable | 2026-06-08 06:12:42.149510 |
IBM Robotic Process Automation information disclosure
MEDIUM (6.5)
A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.10, 23.0.0 through 23.0.10 may result in access to client vault credentials. This difficult to exploit vulnerability could allow a low privileged attacker to programmatically access client vault credentials. IBM X-Force ID: 268752.
Published: 2023-11-03T22:51:45.475Z
Updated: 2024-09-05T14:37:23.153Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40370 |
vulnerable | 2026-06-08 06:09:42.173472 |
IBM Robotic Process Automation information disclosure
LOW (3.7)
IBM Robotic Process Automation 21.0.0 through 21.0.7.1 runtime is vulnerable to information disclosure of script content if the remote REST request computer policy is enabled. IBM X-Force ID: 263470.
Published: 2023-08-22T21:57:37.071Z
Updated: 2024-10-02T15:12:35.118Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38732 |
vulnerable | 2026-06-08 06:08:18.757167 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38718 |
vulnerable | 2026-06-08 06:08:18.694616 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35901 |
vulnerable | 2026-06-08 06:06:28.104393 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35900 |
vulnerable | 2026-06-08 06:06:28.102518 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25680 |
vulnerable | 2026-06-08 05:56:09.629300 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23476 |
vulnerable | 2026-06-08 05:56:02.746237 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23468 |
vulnerable | 2026-06-08 05:56:02.698340 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22863 |
vulnerable | 2026-06-08 05:54:27.277279 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22594 |
vulnerable | 2026-06-08 05:54:26.538707 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22593 |
vulnerable | 2026-06-08 05:54:26.536964 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22592 |
vulnerable | 2026-06-08 05:54:26.535208 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46773 |
vulnerable | 2026-06-08 05:50:39.420397 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43844 |
vulnerable | 2026-06-08 05:49:34.866848 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43574 |
vulnerable | 2026-06-08 05:49:33.570948 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43573 |
vulnerable | 2026-06-08 05:49:33.568572 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42442 |
vulnerable | 2026-06-08 05:49:29.952287 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41740 |
vulnerable | 2026-06-08 05:48:30.906020 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38710 |
vulnerable | 2026-06-08 05:47:16.921983 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38709 |
vulnerable | 2026-06-08 05:47:16.918701 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36774 |
vulnerable | 2026-06-08 05:46:07.736695 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33953 |
vulnerable | 2026-06-08 05:44:51.846982 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22502 |
vulnerable | 2026-06-08 05:40:53.867751 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22490 |
vulnerable | 2026-06-08 05:40:53.843683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.