Automationanywhere

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Automationanywhere records in CISA KEV

No Automationanywhere vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Automation 360 · all components

TI-2024-27536 CVE-2024-41226 · GHSA-cg4j-f388-m354

HIGH 73

A CSV injection vulnerability in Automation Anywhere Automation 360 version 21094 allows attackers to execute arbitrary code via a crafted payload.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00567 Published 2024-08-06 No fix listed CWE-1236

TI-2022-12216 CVE-2022-29856 · GHSA-xcgj-hpmh-8rc2

LOW 36

A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01573 Published 2022-04-29 No fix listed CWE-798