CVE-2022-43573
low-risk
Published 2023-01-05
IBM Robotic Process Automation 20.12 through 21.0.6 is vulnerable to exposure of the name and email for the creator/modifier of platform level objects. IBM X-Force ID: 238678.
Do I need to act?
-
0.17% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.1/10
Low
NETWORK
/ HIGH complexity
Affected Products (3)
Robotic Process Automation As A Service
Affected Vendors
21
/ 100
low-risk
Severity
11/34 · Low
Exploitability
1/34 · Minimal
Exposure
9/34 · Low