CVE-2023-35901CWE-287

IBM Robotic Process Automation security bypass

Low · published July 16, 2023

CVSS v3.1
2.7
EPSS
0%
Percentile
38.7
In the wild
Unconfirmed
What it is

IBM Robotic Process Automation 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 is vulnerable to client side validation bypass which could allow invalid changes or values in some fields. IBM X-Force ID: 259380.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00458 · 38.7th percentile
Weakness
CWE-287 · Improper Authentication
Published
2023-07-16T23:31Z
EPSS history
Timeline
  • 16 JUL 23:31Z
    IBM Robotic Process Automation security bypass
    cvelistv5