CVE-2023-35901: IBM Robotic Process Automation security bypass

Published Jul 15, 2023
·
Updated

IBM Robotic Process Automation 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 is vulnerable to client side validation bypass which could allow invalid changes or values in some fields. IBM X-Force ID: 259380.

Other sources

IBM Robotic Process Automation is vulnerable to client side validation bypass which could allow invalid changes or values in some fields.

Affected Software

17 affected components
IBM Robotic Process Automation<=21.0.0 - 21.0.7.6, 23.0.0 - 23.0.6
IBM Robotic Process Automation for Cloud Pak<=21.0.0 - 21.0.7.6, 23.0.0 - 23.0.6
IBM Robotic Process Automation as a Service<=21.0.0 - 21.0.7.6, 23.0.0 - 23.0.6
IBM Robotic Process Automation>=21.0.0<=21.0.7.6
IBM Robotic Process Automation>=23.0.0<=23.0.6
IBM Robotic Process Automation as a Service>=21.0.0<=21.0.7.6
IBM Robotic Process Automation for Cloud Pak>=21.0.0<=21.0.7.6
IBM Robotic Process Automation for Cloud Pak>=23.0.0<=23.0.6
redhat Openshift
Microsoft Windows
All of the following
Any of the following
IBM Robotic Process Automation>=21.0.0<=21.0.7.6
IBM Robotic Process Automation>=23.0.0<=23.0.6
IBM Robotic Process Automation as a Service>=21.0.0<=21.0.7.6
IBM Robotic Process Automation for Cloud Pak>=21.0.0<=21.0.7.6
IBM Robotic Process Automation for Cloud Pak>=23.0.0<=23.0.6
Any of the following
redhat Openshift
Microsoft Windows

Event History

Jul 15, 2023
CVE Published
via IBM·12:00 AM
Jul 16, 2023
CVE Published
via MITRE·11:31 PM
Data Sourced
via MITRE·11:31 PM
DescriptionSeverityWeakness
Jul 17, 2023
Data Sourced
12:15 AM
Description
Data Sourced
via NVD·12:15 AM
RemedyDescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2023-35901?

The severity of CVE-2023-35901 is medium with a severity value of 5.3.

2

What is the affected software for CVE-2023-35901?

The affected software for CVE-2023-35901 is IBM Robotic Process Automation versions 21.0.0 - 21.0.7.6 and 23.0.0 - 23.0.6.

3

What is client side validation bypass vulnerability in IBM Robotic Process Automation?

The client side validation bypass vulnerability in IBM Robotic Process Automation allows for invalid changes or values in some fields.

4

How can I fix client side validation bypass vulnerability in IBM Robotic Process Automation?

To fix the client side validation bypass vulnerability in IBM Robotic Process Automation, update to a version beyond 23.0.6 or apply the necessary patches provided by IBM.

5

Where can I find more information about CVE-2023-35901?

You can find more information about CVE-2023-35901 on the IBM X-Force Exchange website and the IBM support pages.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203