Robotic process automation as a service

This hub aggregates every CVE we track for Robotic process automation as a service, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Robotic process automation as a service.

• CVE-2023-35900IBM Robotic Process Automation information disclosure4.3Jul 19, 2023
• CVE-2023-35901IBM Robotic Process Automation security bypass2.7Jul 16, 2023
• CVE-2023-22591IBM Robotic Process Automation session fixation3.9Mar 15, 2023
• CVE-2022-46773IBM Robotic Process Automation security bypass4.3Mar 15, 2023
• CVE-2023-25680IBM Robotic Process Automation information disclosure4.2Mar 15, 2023
• CVE-2023-22863IBM Robotic Process Automation information disclosure5.9Jan 18, 2023
• CVE-2023-22594IBM Robotic Process Automation for Cloud Pak cross-site scripting4.6Jan 18, 2023
• CVE-2022-43573IBM Robotic Process Automation information disclosure3.1Jan 5, 2023
• CVE-2022-38710IBM Robotic Process Automation information disclosure5.3Nov 3, 2022
• CVE-2022-36774IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulation of the client proxy configuration. IBM X-Force ID: 233575.5.3Oct 6, 2022
• CVE-2022-22503IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploi...6.1Oct 6, 2022
• CVE-2022-22490IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to obtain sensitive Azure bot credential information. IBM X-Force ID: 226342.4.9Aug 10, 2022
• CVE-2022-33953IBM Robotic Process Automation 21.0.1 and 21.0.2 could allow a user with psychical access to the system to obtain sensitive information due to insufficiently protected access tokens. IBM X-Force ID...4.6Jun 24, 2022
• CVE-2022-22502IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended f...5.4Jun 24, 2022
• CVE-2022-22319IBM Robotic Process Automation 21.0.1 could allow a register user on the system to physically delete a queue that could cause disruption for any scripts dependent on the queue. IBM X-Force ID: 218366.5.4May 9, 2022