CVE-2023-35900: IBM Robotic Process Automation information disclosure
IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may be used to determine software vulnerabilities at the operating system level. IBM X-Force ID: 259368.
Other sources
IBM Robotic Process Automation for Cloud Pak is vulnerable to disclosing server version information which may be used to determine software vulnerabilities at the operating system level.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-35900.
What is the severity of CVE-2023-35900?
The severity of CVE-2023-35900 is medium with a CVSS score of 5.3.
Which IBM products are affected by CVE-2023-35900?
IBM Robotic Process Automation, IBM Robotic Process Automation for Cloud Pak, and IBM Robotic Process Automation as a Service are affected.
How can the vulnerability be exploited?
The vulnerability can be exploited to disclose server version information, which may be used to determine software vulnerabilities at the operating system level.
Where can I find more information about CVE-2023-35900?
You can find more information about CVE-2023-35900 at the IBM X-Force ID: 259368.