IBM Robotic Process Automation With Automation Anywhere
By the Year
In 2024 there have been 0 vulnerabilities in IBM Robotic Process Automation With Automation Anywhere . Robotic Process Automation With Automation Anywhere did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 1 | 6.50 |
| 2020 | 0 | 0.00 |
| 2019 | 9 | 5.73 |
| 2018 | 8 | 6.93 |
It may take a day or so for new Robotic Process Automation With Automation Anywhere vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent IBM Robotic Process Automation With Automation Anywhere Security Vulnerabilities
IBM Robotic Process Automation with Automation Anywhere 11.0 could
CVE-2020-4901
6.5 - Medium
- May 07, 2021
IBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive information or cause a denial of service through username enumeration. IBM X-Force ID: 190992.
IBM Robotic Process Automation with Automation Anywhere 11 could
CVE-2019-4337
5.3 - Medium
- July 01, 2019
IBM Robotic Process Automation with Automation Anywhere 11 could allow an attacker to obtain sensitive information due to missing authentication in Ignite nodes. IBM X-Force ID: 161412.
Missing Authentication for Critical Function
IBM Robotic Process Automation with Automation Anywhere 11 uses an inadequate account lockout setting
CVE-2019-4336
9.8 - Critical
- July 01, 2019
IBM Robotic Process Automation with Automation Anywhere 11 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 161411.
Improper Restriction of Excessive Authentication Attempts
IBM Robotic Process Automation with Automation Anywhere 11 could
CVE-2019-4299
5.5 - Medium
- July 01, 2019
IBM Robotic Process Automation with Automation Anywhere 11 could allow a local user to obtain highly sensitive information from log files when debugging is enabled. IBM X-Force ID: 160765.
Insertion of Sensitive Information into Log File
IBM Robotic Process Automation with Automation Anywhere 11 uses a high privileged PostgreSQL account for database access which could
CVE-2019-4298
7.1 - High
- July 01, 2019
IBM Robotic Process Automation with Automation Anywhere 11 uses a high privileged PostgreSQL account for database access which could allow a local user to perform actions they should not have privileges to execute. IBM X-Force ID: 160764.
IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote authenticated attacker to conduct an LDAP injection
CVE-2019-4297
5.4 - Medium
- July 01, 2019
IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability to make unauthorized queries or modify the LDAP content. IBM X-Force ID: 160761.
LDAP Injection
IBM Robotic Process Automation with Automation Anywhere 11 information disclosure could
CVE-2019-4296
3.3 - Low
- July 01, 2019
IBM Robotic Process Automation with Automation Anywhere 11 information disclosure could allow a local user to obtain e-mail contents from the client debug log file. IBM X-Force ID: 160759.
Insertion of Sensitive Information into Log File
IBM Robotic Process Automation with Automation Anywhere 11 could
CVE-2019-4295
4.9 - Medium
- July 01, 2019
IBM Robotic Process Automation with Automation Anywhere 11 could allow an attacker with specialized access to obtain highly sensitive from the credential vault. IBM X-Force ID: 160758.
IBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to cross-site scripting
CVE-2018-1908
5.4 - Medium
- March 14, 2019
IBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152671.
XSS
IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote attacker to traverse directories on the system
CVE-2018-2006
4.9 - Medium
- February 21, 2019
IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to upload arbitrary files to the system. IBM X-Force ID: 155008.
Directory traversal
IBM Robotic Process Automation with Automation Anywhere 11 could disclose sensitive information in a web request
CVE-2018-1878
5.3 - Medium
- November 02, 2018
IBM Robotic Process Automation with Automation Anywhere 11 could disclose sensitive information in a web request that could aid in future attacks against the system. IBM X-Force ID: 151714.
Information Disclosure
IBM Robotic Process Automation with Automation Anywhere 11 could store highly sensitive information in the form of unencrypted passwords
CVE-2018-1877
7.8 - High
- November 02, 2018
IBM Robotic Process Automation with Automation Anywhere 11 could store highly sensitive information in the form of unencrypted passwords that would be available to a local user. IBM X-Force ID: 151713.
Cleartext Storage of Sensitive Information
IBM Robotic Process Automation with Automation Anywhere 11 could under certain cases
CVE-2018-1876
5.5 - Medium
- November 02, 2018
IBM Robotic Process Automation with Automation Anywhere 11 could under certain cases, display the password in a Control Room log file after installation. IBM X-Force ID: 151707.
Insertion of Sensitive Information into Log File
IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0
CVE-2018-1552
8.8 - High
- November 02, 2018
IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary code on the system, caused by a missing restriction in which file types can be uploaded to the control room. By uploading a malicious file and tricking a victim to run it, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 142889.
Unrestricted File Upload
IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to persistent cross-site scripting
CVE-2018-1812
5.4 - Medium
- October 05, 2018
IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to persistent cross-site scripting, caused by missing escaping of a database field. An attacker that has access to the Control Room database could exploit this vulnerability to execute script in a victim's web browser within the security context of the hosting Web site, once victim opens a certain page in Control Room. IBM X-Force ID: 149883.
XSS
IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to cross-site scripting
CVE-2018-1795
6.1 - Medium
- October 05, 2018
IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 149073.
XSS
IBM Robotic Process Automation with Automation Anywhere 10.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user
CVE-2018-1514
8.8 - High
- June 07, 2018
IBM Robotic Process Automation with Automation Anywhere 10.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 141622.
Session Riding
IBM Robotic Process Automation with Automation Anywhere 10.0 could
CVE-2018-1547
7.7 - High
- June 07, 2018
IBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to execute arbitrary code on the system, caused by improper output encoding in an CSV export. By persuading a victim to download the CSV export, to open it in Microsoft Excel and to confirm the two security questions, an attacker could exploit this vulnerability to run any command or program on the victim's machine. IBM X-Force ID: 142651.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for IBM Robotic Process Automation With Automation Anywhere or by IBM? Click the Watch button to subscribe.
