Page 2 of 12 results (0.003 seconds)

CVSS: 3.9EPSS: 0%CPEs: 3EXPL: 0

CVE-2023-22591 – IBM Robotic Process Automation session fixation

https://notcve.org/view.php?id=CVE-2023-22591

15 Mar 2023 — IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user with physical access to the system due to session tokens for not being invalidated after a password reset. IBM X-Force ID: 243710. • https://exchange.xforce.ibmcloud.com/vulnerabilities/243710 • CWE-613: Insufficient Session Expiration •

CVSS: 6.8EPSS: 0%CPEs: 5EXPL: 0

CVE-2022-46773 – IBM Robotic Process Automation security bypass

https://notcve.org/view.php?id=CVE-2022-46773

15 Mar 2023 — IBM Robotic Process Automation 21.0.0 - 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for credential pools. Invalid credential pools may be created as a result. IBM X-Force ID: 242951. • https://exchange.xforce.ibmcloud.com/vulnerabilities/242951 • CWE-287: Improper Authentication •