Known vulnerabilities in IBM Robotic Process Automation

Vendor: IBM Corporation
Software: IBM Robotic Process Automation
Software CPE: cpe:2.3:a:ibm_corporation:ibm_robotic_process_automation:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 322
Public exploits: 16
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Robotic Process Automation IBM Robotic Process Automation is affected by 322 known vulnerabilities: 1 critical, 36 high, 205 medium, 80 low Critical High Medium Low

Vulnerabilities (322)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117483 - Improper input validation
CVE-2025-53066		 CWE-20 Medium
No
No
 23.0.20.5, 30.0.1 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057		 CWE-20 Medium
No
No
 23.0.20.5, 30.0.1 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754		 CWE-770 Medium
Available
No
 23.0.20.5, 30.0.0.2 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU113173 - Use of Insufficiently Random Values
CVE-2025-7783		 CWE-330 Medium
Available
No
 23.0.20.4, 30.0.0.1 23.07.2025 SB2025072332
SB2025072333
SB2025081876
and 62 more
#VU112940 - Improper input validation
CVE-2025-30761		 CWE-20 Medium
No
No
 23.0.20.4, 30.0.0.2 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 77 more
#VU112941 - Improper input validation
CVE-2025-30754		 CWE-20 Medium
No
No
 23.0.20.4, 30.0.0.2 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU112936 - Improper input validation
CVE-2025-50059		 CWE-20 High
No
No
 23.0.20.4, 30.0.0.2 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 54 more
#VU112132 - Stack-based buffer overflow
CVE-2025-4447		 CWE-121 Medium
No
No
 23.0.20.3 03.07.2025 SB2025070315
SB2025070316
SB2025070319
and 54 more
#VU109840 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-47273		 CWE-22 High
No
No
 23.0.20.4, 30.0.0.1 27.05.2025 SB2025052721
SB2025052734
SB2025052736
and 112 more
#VU107897 - Deserialization of Untrusted Data
CVE-2025-29953		 CWE-502 High
No
No
 21.0.7.21, 23.0.20.2 24.04.2025 SB2025042403
SB2025061320
#VU107520 - Improper input validation
CVE-2025-21587		 CWE-20 Medium
No
No
 23.0.20.3 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 103 more
#VU107521 - Improper input validation
CVE-2025-30698		 CWE-20 Medium
No
No
 23.0.20.3 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 93 more
#VU106013 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-1550		 CWE-94 Low
No
No
 23.0.20.5, 30.0.1 25.03.2025 SB2025032530
SB2025122221
SB2026010635
and 2 more
#VU105984 - Inefficient Regular Expression Complexity
CVE-2025-27789		 CWE-1333 Low
No
No
 21.0.7.21, 23.0.20.2 24.03.2025 SB2025032476
SB2025041020
SB2025041691
and 45 more
#VU105452 - Server-Side Request Forgery (SSRF)
CVE-2025-27152		 CWE-918 Medium
Available
No
 21.0.7.21, 23.0.20.2 07.03.2025 SB2025030777
SB2025031918
SB2025032417
and 42 more
#VU104099 - Use After Free
CVE-2024-56171		 CWE-416 High
No
No
 21.0.7.21, 23.0.20.2 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU103769 - Resource exhaustion
CVE-2025-25193		 CWE-400 Low
No
No
 21.0.7.21, 23.0.20.2 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 56 more
#VU83992 - Use of Insufficiently Random Values
CVE-2020-36732		 CWE-330 Medium
No
No
 23.0.20.5, 30.0.1 08.12.2023 SB2023120804
SB2024030742
SB2025091116
and 26 more
#VU82980 - Improper input validation
CVE-2023-27043		 CWE-20 Medium
No
No
 23.0.20.3 10.11.2023 SB2023041957
SB2023111064
SB2023111315
and 120 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897		 CWE-185 Medium
No
No
 23.0.20.4, 30.0.0.1 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more


Showing elements 1 - 20 out of 322