CVE-2022-39168: IBM Robotic Process Automation

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

IBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in upgrade logs. IBM X-Force ID: 235422.

Affected products

• IBM Robotic Process Automation: version 21.0.3 only; version 21.0.4 only
• IBM Robotic Process Automation For Cloud Pak: version 21.0.3 only; version 21.0.4 only
• IBM Robotic Process Automation For Services: version 21.0.3 only; version 21.0.4 only

Published 2022-09-29. Last modified 2026-06-17.