| Package | Affected versions | Patched versions |
|---|---|---|
| robotic process automation for cloud pak | ≥ 21.0.0, < 21.0.7.20≥ 23.0.0, < 23.0.20 | 21.0.7.2023.0.20 |
IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free