CVE-2022-22490: IBM Robotic Process Automation

Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days.

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to obtain sensitive Azure bot credential information. IBM X-Force ID: 226342.

Affected products

• IBM Robotic Process Automation: before 21.0.3 (fixed in 21.0.3)
• IBM Robotic Process Automation As A Service: any version
• IBM Robotic Process Automation For Cloud Pak: before 21.0.3 (fixed in 21.0.3)

Published 2022-08-10. Last modified 2026-06-17.