CVE-2023-22593: IBM Robotic Process Automation for Cloud Pak security configuration

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-06-27 · updated 2026-06-17
Weakness: CWE-863

Description

IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to security misconfiguration of the Redis container which may provide elevated privileges. IBM X-Force ID: 244074.

Affected products

IBM Robotic Process Automation: from 21.0.1 through 21.0.7.3; from 23.0.0 through 23.0.3

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/244074
https://www.ibm.com/support/pages/node/7006001
https://exchange.xforce.ibmcloud.com/vulnerabilities/244074
https://www.ibm.com/support/pages/node/7006001

Get alerted when CVE-2023-22593 or the next vulnerability affects your stack