CVE-2022-41294

IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api

Medium · published October 6, 2022

CVSS v3.0
6.5
EPSS
0%
Percentile
20.6
In the wild
Unconfirmed
What it is

IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api. IBM X-Force ID: 236807.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/C:L/I:L/S:U/UI:N/PR:N/A:N/AV:N/AC:L/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00292 · 20.6th percentile
Published
2022-10-06T17:15Z
EPSS history
Timeline
  • 06 OCT 17:15Z
    IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api
    cvelistv5