CVE-2022-22502

published 2022-06-24

CVE-2022-22502: IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…

medium 5.4 CVSS 3.1

AV N AC L PR L UI R S C C L I L A N

IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 227124.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
ibm	robotic_process_automation	—	—
ibm	robotic_process_automation	—	—
ibm	robotic_process_automation	>= 21.0.1 < 21.0.1.5	21.0.1.5
ibm	robotic_process_automation	>= 21.0.2 < 21.0.2.2	21.0.2.2
ibm	robotic_process_automation_as_a_service	< 21.0.2.2	21.0.2.2
ibm	robotic_process_automation_for_cloud_pak	< 21.0.2.2	21.0.2.2

CWE-79