Automationanywhere

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Automationanywhere records in CISA KEV

No Automationanywhere vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2024-27536 CVE-2024-41226 · GHSA-cg4j-f388-m354

HIGH 73

A CSV injection vulnerability in Automation Anywhere Automation 360 version 21094 allows attackers to execute arbitrary code via a crafted payload.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00567 Published 2024-08-06 No fix listed CWE-1236

TI-2024-06421 CVE-2024-6922 · GHSA-wwxv-fvxx-vp4c

MEDIUM 54

Automation Anywhere Automation 360 v21-v32 is vulnerable to Server-Side Request Forgery in a web API component.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.30172 Published 2024-07-26 No fix listed CWE-918

TI-2022-12216 CVE-2022-29856 · GHSA-xcgj-hpmh-8rc2

LOW 36

A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01573 Published 2022-04-29 No fix listed CWE-798