CVE-2023-38718: IBM Robotic Process Automation

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM Robotic Process Automation 21.0.0 through 21.0.7.8 could disclose sensitive information from access to RPA scripts, workflows and related data. IBM X-Force ID: 261606.

Affected products

• IBM Robotic Process Automation: from 21.0.0, up to and including 21.0.7.8; from 23.0.0, up to and including 23.0.8

Published 2023-09-20. Last modified 2026-06-17.