CVE-2022-22415 — IBM Robotic Process Automation vulnerability

3 documents3 sources

Severity

6.5MEDIUMNVD

EPSS

0.2%

top 62.93%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Robotic Process Automation

Timeline

PublishedMay 5

Latest updateMay 6

Description

A vulnerability exists where an IBM Robotic Process Automation 21.0.1 regular user is able to obtain view-only access to some admin pages in the Control Center IBM X-Force ID: 223029.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/robotic_process_automation21.0.1

▶NVDibm/robotic_process_automation21.0.1

🔴Vulnerability Details

GHSA

GHSA-89m6-4xrg-c225: A vulnerability exists where an IBM Robotic Process Automation 21↗2022-05-06

▶

CVEList

CVE-2022-22415: A vulnerability exists where an IBM Robotic Process Automation 21↗2022-05-05

▶