IBM Robotic Process Automation security bypass
CVE-2023-35901

2.7LOW

Key Information:

Vendor
IBM
Status
Robotic Process Automation
Vendor
CVE Published:
17 July 2023

Summary

IBM Robotic Process Automation 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 is vulnerable to client side validation bypass which could allow invalid changes or values in some fields. IBM X-Force ID: 259380.

Affected Version(s)

Robotic Process Automation 21.0.0 <= 21.0.7.6

Robotic Process Automation 23.0.0 <= 23.0.6

References

https://www.ibm.com/support/pages/node/7012317
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/259380
vdb-entry

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.