CVE-2023-22594: IBM Robotic Process Automation

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 244075.

Affected products

• IBM Robotic Process Automation: before 21.0.5 (fixed in 21.0.5)
• IBM Robotic Process Automation As A Service: before 21.0.5 (fixed in 21.0.5)
• IBM Robotic Process Automation For Cloud Pak: before 21.0.5 (fixed in 21.0.5)

Published 2023-01-18. Last modified 2026-06-17.