CVE-2022-43844: high-severity vulnerability in IBM Robotic Process Automation for Cloud Pak
IBM Robotic Process Automation for Cloud Pak session fixation
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 0.7%
IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken access control. A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak. IBM X-Force ID: 239081.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
IBM · Robotic Process Automation for Cloud PakRelated CVEs — IBM Robotic Process Automation for Cloud Pak
In the same product, most dangerous first.
CVE-2023-45189MEDIUMIBM Robotic Process Automation information disclosureEPSS 0.6%CVE-2023-23476LOWIBM Robotic Process Automation information disclosureEPSS 0.5%CVE-2023-38718LOWIBM Robotic Process Automation information disclosureEPSS 0.5%CVE-2023-22594MEDIUMIBM Robotic Process Automation for Cloud Pak cross-site scriptingEPSS 0.4%CVE-2024-49824MEDIUMIBM Robotic Process Automation security bypassEPSS 0.3%CVE-2024-49825MEDIUMIBM Robotic Process Automation session fixationEPSS 0.2%