CVE-2022-22502: XSS
IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 227124.
Other sources
IBM Robotic Process Automation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-22502?
CVE-2022-22502 is a vulnerability in IBM Robotic Process Automation that allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
How severe is CVE-2022-22502?
CVE-2022-22502 has a severity rating of 5.4 (medium).
Which software versions are affected by CVE-2022-22502?
IBM Robotic Process Automation versions up to and including 21.0.2.2, IBM Robotic Process Automation as a Service versions up to and including 21.0.2.2, and IBM Robotic Process Automation for Cloud Pak versions up to and including 21.0.2.2 are affected by CVE-2022-22502.
How can I fix CVE-2022-22502?
To fix CVE-2022-22502, apply the relevant patch provided by IBM. Links to the patches can be found in the references section.
What is CWE-79?
CWE-79 is a Common Weakness Enumeration category that refers to cross-site scripting (XSS) vulnerabilities.