Back to CVE Browser

CVE-2020-4901

MEDIUM

6.5

CVSS Severity Score

EPSS Score0.1650%

EPSS Percentile44.19th

PublishedMay 7, 2021

Last ModifiedNov 21, 2024

Vulnerability Description

IBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive information or cause a denial of service through username enumeration. IBM X-Force ID: 190992.

Affected Platforms (CPE)

📦

Ibm

Robotic Process Automation With Automation Anywhere

>= 11.0.0.0 and < 11.0.0.10

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/190992

🔗 https://www.ibm.com/support/pages/node/6450435

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/190992

🔗 https://www.ibm.com/support/pages/node/6450435

Related Vulnerabilities

CVE-2019-43369.8

IBM Robotic Process Automation with Automation Anywhere 11 uses an inadequate account lockout setting that could allow a remote at...

CVE-2018-15478.0

IBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to execute arbitrary code on the system...

CVE-2019-42987.1

IBM Robotic Process Automation with Automation Anywhere 11 uses a high privileged PostgreSQL account for database access which cou...

CVE-2018-18766.2

IBM Robotic Process Automation with Automation Anywhere 11 could under certain cases, display the password in a Control Room log f...