Known vulnerabilities in IBM Robotic Process Automation - page 2

Vendor: IBM Corporation
Software: IBM Robotic Process Automation
Software CPE: cpe:2.3:a:ibm_corporation:ibm_robotic_process_automation:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 322
Public exploits: 16
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Robotic Process Automation IBM Robotic Process Automation is affected by 322 known vulnerabilities: 1 critical, 36 high, 205 medium, 80 low Critical High Medium Low

Vulnerabilities (322)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107493 - Insufficient Session Expiration
CVE-2024-49825		 CWE-613 Low
No
No
 23.0.20.1 16.04.2025 SB2025041642
#VU107416 - Weak Password Requirements
CVE-2022-35280		 CWE-521 Critical
No
No
 21.0.3 14.04.2025 SB2025041428
#VU101344 - Integer overflow
CVE-2024-10917		 CWE-190 Low
No
No
 21.0.7.21, 23.0.20.1 09.12.2024 SB2024120927
SB2024120928
SB2024120929
and 66 more
#VU101264 - Client-Side Enforcement of Server-Side Security
CVE-2024-49824		 CWE-602 Low
No
No
 21.0.7.19, 23.0.19 05.12.2024 SB2024120514
#VU101202 - Insecure inherited permissions
CVE-2024-51448		 CWE-277 Low
No
No
 21.0.7.17, 23.0.17 04.12.2024 SB2024120431
#VU100259 - Resource Management Errors
CVE-2024-47535		 CWE-399 Low
No
No
 21.0.7.21, 23.0.20.2 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU98267 - Inefficient Algorithmic Complexity
CVE-2024-43485		 CWE-407 Medium
No
No
 21.0.7.19, 23.0.19 09.10.2024 SB2024100927
SB2024100946
SB2024100978
and 12 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296		 CWE-1333 Low
No
No
 21.0.7.19, 23.0.18 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 21.0.7.20, 23.0.20 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590		 CWE-405 Medium
Available
No
 23.0.19 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU96058 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50314		 CWE-200 Low
No
No
 21.0.7.18, 23.0.19 15.08.2024 SB2024081566
SB2024091324
SB2024091814
and 44 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 21.0.7.19, 23.0.19 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 21.0.7.19 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 21.0.7.19 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU88828 - Resource exhaustion
CVE-2024-3651		 CWE-400 Medium
No
No
 21.0.7.19, 23.0.19 19.04.2024 SB2024041905
SB2024041906
SB2024041907
and 112 more
#VU84849 - Command injection
CVE-2023-5752		 CWE-77 Medium
No
No
 21.0.7.19, 23.0.19 28.12.2023 SB2023122824
SB2023122825
SB2023122826
and 32 more
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803		 CWE-200 Medium
No
No
 21.0.7.19 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU62512 - Improper input validation
CVE-2021-3572		 CWE-20 Medium
No
No
 21.0.7.19, 23.0.19 22.04.2022 SB2022042257
SB2022042259
SB2021071390
and 51 more
#VU48600 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-20916		 CWE-22 Medium
No
No
 21.0.7.19, 23.0.19 04.09.2020 SB2020090420
SB2020112328
SB2020122208
and 29 more
#VU26412 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2019-11236		 CWE-93 Medium
Available
No
 21.0.7.19 26.03.2020 SB2020032626
SB2020031827
SB2019091504
and 36 more


Showing elements 21 - 40 out of 322