VULNERABILITY INTELLIGENCE

CVE-2023-22863

CVSS score5.9 MEDIUM
EPSS probability0.36%
CISA KEVNot currently listed
Published2023-01-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

IBM Robotic Process Automation 20.12.0 through 21.0.2 defaults to HTTP in some RPA commands when the prefix is not explicitly specified in the URL. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 244109.

Weakness classification

  • psirt@us.ibm.com: CWE-319

Primary references