Known vulnerabilities in Robotic Process Automation for Cloud Pak

Vendor: IBM Corporation
Software: Robotic Process Automation for Cloud Pak
Software CPE: cpe:2.3:a:ibm_corporation:robotic_process_automation_for_cloud_pak:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 662
Public exploits: 27
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Robotic Process Automation for Cloud Pak Robotic Process Automation for Cloud Pak is affected by 662 known vulnerabilities: 83 high, 332 medium, 247 low Critical High Medium Low

Vulnerabilities (662)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135090 - Improper Privilege Management
CVE-2026-3621		 CWE-269 Medium
No
No
 23.0.20.7, 30.0.3 24.06.2026 SB2026062429
SB2026062430
SB20260626104
and 14 more
#VU132041 - Resource exhaustion
CVE-2026-4410		 CWE-400 Low
No
No
 23.0.20.7, 30.0.3 21.05.2026 SB2026052124
SB2026060911
SB2026060912
and 13 more
#VU132031 - Security Features
CVE-2026-5516		 CWE-254 Low
No
No
 23.0.20.7, 30.0.3 21.05.2026 SB2026052115
SB20260626104
SB2026071327
and 14 more
#VU130954 - Out-of-bounds read
CVE-2026-6918		 CWE-125 Medium
No
No
 23.0.20.7, 30.0.3 11.05.2026 SB2026051152
SB20260528261
SB2026060168
and 12 more
#VU126758 - Improper input validation
CVE-2026-22016		 CWE-20 Medium
No
No
 23.0.20.7, 30.0.3 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 85 more
#VU126759 - Improper input validation
CVE-2026-34282		 CWE-20 Medium
No
No
 23.0.20.7, 30.0.3 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 40 more
#VU126761 - Improper input validation
CVE-2026-22021		 CWE-20 Medium
No
No
 23.0.20.7, 30.0.3 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 87 more
#VU126762 - Improper input validation
CVE-2026-22013		 CWE-20 Medium
No
No
 23.0.20.7, 30.0.3 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 84 more
#VU126763 - Improper input validation
CVE-2026-22008		 CWE-20 Low
No
No
 23.0.20.7, 30.0.3 22.04.2026 SB20260422123
SB2026050683
SB20260513117
and 21 more
#VU126764 - Improper input validation
CVE-2026-22018		 CWE-20 Low
No
No
 23.0.20.7, 30.0.3 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 84 more
#VU126765 - Improper input validation
CVE-2026-22007		 CWE-20 Low
No
No
 23.0.20.7, 30.0.3 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 84 more
#VU126766 - Improper input validation
CVE-2026-34268		 CWE-20 Low
No
No
 23.0.20.7, 30.0.3 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 84 more
#VU124875 - Use of Hard-coded Cryptographic Key
CVE-2025-14923		 CWE-321 Low
No
No
 23.0.20.6, 30.0.3 06.04.2026 SB2026040626
SB2026040627
SB2026041006
and 19 more
#VU124833 - Server-Side Request Forgery (SSRF)
CVE-2026-1561		 CWE-918 Low
No
No
 23.0.20.6, 30.0.3 02.04.2026 SB2026040252
SB2026040325
SB2026040331
and 15 more
#VU124831 - Weak Password Requirements
CVE-2025-14917		 CWE-521 Low
No
No
 23.0.20.6, 30.0.3 02.04.2026 SB2026040252
SB2026040327
SB2026040328
and 19 more
#VU124829 - Exposure of sensitive information to an unauthorized actor
CVE-2025-14915		 CWE-200 Low
No
No
 23.0.20.6, 30.0.3 02.04.2026 SB2026040252
SB2026040326
SB2026040329
and 15 more
#VU123884 - Integer overflow
CVE-2026-23865		 CWE-190 Medium
No
No
 23.0.20.7, 30.0.3 11.03.2026 SB2026031140
SB2026031141
SB2026031523
and 57 more
#VU120993 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-69225		 CWE-444 Low
No
No
 23.0.20.6, 30.0.2 06.01.2026 SB2026010643
SB2026012920
SB20260216150
and 9 more
#VU120992 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-69224		 CWE-444 Low
No
No
 23.0.20.6, 30.0.2 06.01.2026 SB2026010643
SB20260216150
SB2026030633
and 8 more
#VU120990 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2025-69223		 CWE-409 Medium
No
No
 23.0.20.6, 30.0.2 06.01.2026 SB2026010643
SB2026012661
SB2026012855
and 15 more


Showing elements 1 - 20 out of 662