CVE-2023-38734

—

CVSS 3.1

9.8 critical

EPSS

<1%p51

Published

Aug 22, 2023 (Aug 22, 2023)

Modified

Jun 17, 2026

Description

IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an LDAP directory. IBM X-Force ID: 262481.

Vendors: ibm
Products: robotic process automation
Weakness: CWE-269
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.