CVE-2023-23476

—

CVSS 3.1

6.5 medium

EPSS

<1%p41

Published

Aug 2, 2023 (Aug 2, 2023)

Modified

Jun 17, 2026

Description

IBM Robotic Process Automation 21.0.0 through 21.0.7.latest is vulnerable to unauthorized access to data due to insufficient authorization validation on some API routes. IBM X-Force ID: 245425.

Vendors: ibm
Products: robotic process automation, robotic process automation for cloud pak
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.