Ibm: >> Robotic Process Automation With Automation Anywhere >> 11 Security Vulnerabilities
IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary code on the system, caused by a missing restriction in which file types can be uploaded to the control room. By uploading a malicious file and tricking a victim to run it, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 142889.
CVSS Score
5.5
EPSS Score
0.019
Published
2018-11-02
IBM Robotic Process Automation with Automation Anywhere 11 could disclose sensitive information in a web request that could aid in future attacks against the system. IBM X-Force ID: 151714.
CVSS Score
5.3
EPSS Score
0.001
Published
2018-11-02