WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product process automation✕
Overview 108 matches · 24 in Waratek scope · 6 protected · 3 exploited · 2 CISA KEV · 4 public PoC · 3 EPSS ≥ 0.5
split by peak 31 / year
Not applicable: 81Outside Waratek scope: 3No exploit published: 16Mitigation candidate: 2Protected by Waratek: 6 Low: 3Medium: 59High: 34Critical: 12 not blocked: 102blocked by ARMR today: 6 No public exploit: 102Proof of concept only: 3Exploited: 3
20062008201020122014201620182020202220242026
108 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2018-1795 Medium 2018-10-05 Not applicable No public exploit IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 149073.
CVE-2018-1547 High 2018-06-07 Not applicable No public exploit IBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to execute arbitrary code on the system, caused by improper output encoding in an CSV export. By persuading a victim to download the CSV export, to open it in Microsoft Excel and to confirm the two security questions, an attacker could exploit this vulnerability to run any command or program on the victim's machine. IBM X-Force ID: 142651.
CVE-2018-1514 High 2018-06-07 Not applicable No public exploit IBM Robotic Process Automation with Automation Anywhere 10.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 141622.
CVE-2018-2401 High 2018-03-14 Not applicable No public exploit SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting in an XML External Entity (XXE) vulnerability.
CVE-2018-2400 High 2018-03-14 Not applicable No public exploit Under certain conditions SAP Business Process Automation (BPA) By Redwood, 9.00, 9.10, allows an attacker to access information which would otherwise be restricted.
CVE-2018-2366 Medium 2018-03-14 Not applicable No public exploit SAP Business Process Automation (BPA) By Redwood, 9.0, 9.1, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are passed through to the file APIs.
CVE-2017-1751 Medium 2017-12-20 Not applicable No public exploit IBM Robotic Process Automation with Automation Anywhere 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 135546.
CVE-2005-3653 High 2005-12-31 Not applicable No public exploit Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
‹ prev page 2 of 2 next ›