IBM Robotic Process Automation 21.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:robotic_process_automation:21.0.0:*:*:*:*:*:*:*
part: a version: 21.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Robotic Process Automation (bddc15df-bb85-545e-b6a8-50b36d934df7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-51457 |
vulnerable | 2026-06-08 06:52:12.013685 |
IBM Robotic Process Automation for Cloud Pak cross-site scripting
MEDIUM (4.4)
IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-01-22T16:36:54.641Z
Updated: 2025-02-18T19:38:42.714Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49825 |
vulnerable | 2026-06-08 06:50:14.753934 |
IBM Robotic Process Automation session fixation
MEDIUM (6.3)
IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0 through 23.0.20 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.
Published: 2025-04-14T14:53:40.800Z
Updated: 2025-09-01T00:54:05.019Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30607 |
vulnerable | 2026-06-08 05:43:38.647967 |
Details available
LOW (2.7)
IBM Robotic Process Automation 20.10.0, 20.12.5, 21.0.0, 21.0.1, and 21.0.2 contains a vulnerability that could allow a user to obtain sensitive information due to information properly masked in the control center UI. IBM X-Force ID: 227294.
Published: 2022-06-17T15:20:16.163Z
Updated: 2024-09-16T21:57:48.331Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22413 |
vulnerable | 2026-06-08 05:40:53.724695 |
Details available
MEDIUM (4.2)
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 223022.
Published: 2022-05-12T15:30:18.162Z
Updated: 2024-09-17T00:02:08.181Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22334 |
vulnerable | 2026-06-08 05:40:53.569653 |
Details available
MEDIUM (4.2)
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user to access information from a tenant of which they should not have access. IBM X-Force ID: 219391.
Published: 2022-07-31T17:30:23.478Z
Updated: 2024-09-17T03:54:26.416Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.