Vulnerabilities

TI-2024-27536 CVE-2024-41226 · GHSA-cg4j-f388-m354

A CSV injection vulnerability in Automation Anywhere Automation 360 version 21094 allows…

HIGH 73

A CSV injection vulnerability in Automation Anywhere Automation 360 version 21094 allows attackers to execute arbitrary code via a crafted payload.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00567 Published 2024-08-06 No fix listed CWE-1236

TI-2024-06421 CVE-2024-6922 · GHSA-wwxv-fvxx-vp4c

MEDIUM 54

Automation Anywhere Automation 360 v21-v32 is vulnerable to Server-Side Request Forgery in a web API component.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.30172 Published 2024-07-26 No fix listed CWE-918

TI-2022-12216 CVE-2022-29856 · GHSA-xcgj-hpmh-8rc2

LOW 36

A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01573 Published 2022-04-29 No fix listed CWE-798