CVE-2023-23468

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to insufficient security configuration which may allow creation of namespaces within a cluster. IBM X-Force ID: 244500.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected software

Vendor	Product	Versions
IBM	Robotic Process Automation for Cloud Pak	>= 21.0.1, <= 21.0.7.3; >= 23.0.0, <= 23.0.3

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/244500VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/7005999Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/244500VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/7005999Patch, Vendor Advisory

Timeline

Published: Jun 27, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-234693.3IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.CVE-2023-23479.8A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability aff CVE-2023-234706.4IBM i 7.2, 7.3, 7.4, and 7.5 could allow an authenticated privileged administrator to gain elevated privileges in non-default configurations CVE-2023-234726.5IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7) could allow an authenticated user to obtain sensitive informatio CVE-2023-234738.8IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and un CVE-2023-234745.3IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote attacker to obtain sensitive information when a stack trace is returne CVE-2023-234754.6IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript CVE-2023-234766.5IBM Robotic Process Automation 21.0.0 through 21.0.7.latest is vulnerable to unauthorized access to data due to insufficient authorization v CVE-2023-234779.8IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specia CVE-2023-23489.8A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been rated as critical. This issue affects some u CVE-2023-234805.4IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed CVE-2023-234815.4IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to