First published: Mon Sep 26 2022(Updated: )
IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api. IBM X-Force ID: 236807.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Robotic Process Automation for Cloud Pak | <=< 21.0.5 | |
IBM Robotic Process Automation as a Service | <=< 21.0.5 | |
IBM Robotic Process Automation | <=< 21.0.5 | |
IBM Robotic Process Automation | >=21.0.0<=21.0.4 | |
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this IBM Robotic Process Automation vulnerability is CVE-2022-41294.
The severity level of vulnerability CVE-2022-41294 is medium with a CVSS score of 6.5.
IBM Robotic Process Automation versions 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 are affected by vulnerability CVE-2022-41294.
To fix vulnerability CVE-2022-41294 in IBM Robotic Process Automation, apply the patch available at this link: [Download IBM Robotic Process Automation 21.0.5](https://www.ibm.com/support/pages/download-ibm-robotic-process-automation-2105).