CVE-2018-1547

IBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to execute arbitrary code on the system, caused by improper output…

High · published June 7, 2018

CVSS v3.0
8.0
EPSS
2%
Percentile
80.1
In the wild
Unconfirmed
What it is

IBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to execute arbitrary code on the system, caused by improper output encoding in an CSV export. By persuading a victim to download the CSV export, to open it in Microsoft Excel and to confirm the two security questions, an attacker could exploit this vulnerability to run any command or program on the victim's machine. IBM X-Force ID: 142651.

The record
Technical detail
CVSS v3.0
8.0 · HIGH
Vector
CVSS:3.0/A:H/AC:H/AV:N/C:H/I:H/PR:L/S:C/UI:R/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.01966 · 80.1th percentile
Published
2018-06-07T14:00Z
EPSS history
Timeline
  • 07 JUN 14:00Z
    IBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to execute arbitrary code on the system, caused by improper output…
    cvelistv5