Security Advisory

CVE-2022-22433

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-05-05 16:00:48

Last updated 2024-09-16 18:08:19

Assigner ibm

State PUBLISHED

Description

IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with. IBM X-Force ID: 224156.

← Browse all CVEs View on cve.org ↗