CVE-2022-22434 — IBM Robotic Process Automation vulnerability

3 documents3 sources
Severity
4.6MEDIUMNVD
EPSS
0.0%
top 85.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Robotic Process Automation
Timeline
PublishedMay 5
Latest updateMay 6

Description

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user with physical access to create an API request modified to create additional objects. IBM X-Force ID: 224159.

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 0.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/robotic_process_automation21.0.0, 21.0.1, 21.0.2+2
▶NVDibm/robotic_process_automation21.0.1, 21.0.2+1

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-q899-v9mm-6fc4: IBM Robotic Process Automation 21↗2022-05-06
▶
CVEList
CVE-2022-22434: IBM Robotic Process Automation 21↗2022-05-05
▶
CVE-2022-22434 — IBM vulnerability | cvebase