CVE-2022-43844: IBM Robotic Process Automation For Cloud Pak

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken access control. A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak. IBM X-Force ID: 239081.

Affected products

  • IBM Robotic Process Automation For Cloud Pak: from 20.12, before 21.0.3.1 (fixed in 21.0.3.1)

Published 2023-01-05. Last modified 2026-06-17.