Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:robotic_process_automation:21.0.1:*:*:*:*:*:*:*

part: a version: 21.0.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRobotic Process Automation (bddc15df-bb85-545e-b6a8-50b36d934df7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-51456 vulnerable 2026-06-08 06:52:12.009215 IBM Robotic Process Automation information disclosure
MEDIUM (5.9)
IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to obtain sensitive data that may be exposed through certain crypto-analytic attacks.
Published: 2025-01-12T13:26:34.770Z
Updated: 2025-01-13T15:15:57.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51448 vulnerable 2026-06-08 06:52:11.997816 IBM Robotic Process Automation privilege escalation
MEDIUM (6.7)
IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to escalate their privileges. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service. A subsequent service or server restart will then run that binary with administrator privilege.
Published: 2025-01-18T15:08:42.484Z
Updated: 2025-01-21T20:58:29.659Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49824 vulnerable 2026-06-08 06:50:14.744329 IBM Robotic Process Automation security bypass
MEDIUM (6.5)
IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validation of client-side security enforcement.
Published: 2025-01-18T15:11:58.522Z
Updated: 2025-01-21T20:58:13.548Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38710 vulnerable 2026-06-08 05:47:16.920301 IBM Robotic Process Automation information disclosure
IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version to an unauthorized control sphere information that could aid in further attacks against the system. IBM X-Force ID: 234292.
Published: 2022-11-03T00:00:00.000Z
Updated: 2024-09-25T18:15:08.879Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33954 vulnerable 2026-06-08 05:44:51.848526 IBM Robotic Process Automation information disclosure
MEDIUM (4.6)
IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 could allow a user with psychical access to the system to obtain sensitive information due to insufficiently protected credentials.
Published: 2024-12-19T00:44:55.747Z
Updated: 2024-12-19T16:38:49.868Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30607 vulnerable 2026-06-08 05:43:38.648704 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22434 vulnerable 2026-06-08 05:40:53.750015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22415 vulnerable 2026-06-08 05:40:53.727712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22413 vulnerable 2026-06-08 05:40:53.726072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22319 vulnerable 2026-06-08 05:40:08.208834 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.