5.3

CVE-2023-35900

IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may be used to determine software vulnerabilities at the operating system level.  IBM X-Force ID:  259368.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Robotic Process Automation Version <= 21.0.7.4
   Redhat ≫ Openshift Version-
   Microsoft ≫ Windows Version-
Ibm ≫ Robotic Process Automation Version >= 23.0.0 <= 23.0.5
   Redhat ≫ Openshift Version-
   Microsoft ≫ Windows Version-
Ibm ≫ Robotic Process Automation As A Service Version <= 21.0.7.4
   Redhat ≫ Openshift Version-
   Microsoft ≫ Windows Version-
Ibm ≫ Robotic Process Automation As A Service Version >= 23.0.0 <= 23.0.5
   Redhat ≫ Openshift Version-
   Microsoft ≫ Windows Version-
Ibm ≫ Robotic Process Automation For Cloud Pak Version <= 21.0.7.4
   Redhat ≫ Openshift Version-
   Microsoft ≫ Windows Version-
Ibm ≫ Robotic Process Automation For Cloud Pak Version >= 23.0.0 <= 23.0.5
   Redhat ≫ Openshift Version-
   Microsoft ≫ Windows Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.07% 0.214
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
psirt@us.ibm.com 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.