CVE-2023-35901
LowCVSS 2.7Exploitation Probability (EPSS)
Low risk31th percentile — higher than 31% of all known CVEs
Summary
IBM Robotic Process Automation versions 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 are vulnerable to client side validation bypass, which could allow invalid changes or values in some fields.
Risk Assessment
The ability to introduce invalid data may lead to unauthorized changes in the system, jeopardizing data integrity and application security.
Recommendation
It is recommended to update to the latest version of the software to mitigate this vulnerability and implement additional server-side validation mechanisms.
Original NVD description (English source)
IBM Robotic Process Automation 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 is vulnerable to client side validation bypass which could allow invalid changes or values in some fields. IBM X-Force ID: 259380.