What’s Vulnerable › Vulnerabilities

CVE-2023-35901: IBM Robotic Process Automation security bypass

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-07-17 · updated 2026-06-17
Weakness: CWE-287

Description

IBM Robotic Process Automation 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 is vulnerable to client side validation bypass which could allow invalid changes or values in some fields. IBM X-Force ID: 259380.

Affected products

IBM Robotic Process Automation: from 21.0.0 through 21.0.7.6; from 23.0.0 through 23.0.6
IBM Robotic Process Automation as a Service: from 21.0.0 through 21.0.7.6
IBM Robotic Process Automation for Cloud Pak: from 21.0.0 through 21.0.7.6; from 23.0.0 through 23.0.6

References

Get alerted when CVE-2023-35901 or the next vulnerability affects your stack