https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-49825.htmlhttps://patchthecve.com/cve/CVE-2024-49825.htmlWed, 17 Jun 2026 08:00:29 +0000MEDIUM 6.3: IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0 through 23.0.20 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.https://patchthecve.com/cve/CVE-2024-51457.htmlhttps://patchthecve.com/cve/CVE-2024-51457.htmlWed, 17 Jun 2026 08:05:44 +0000MEDIUM 4.4: IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to crehttps://patchthecve.com/cve/CVE-2024-49824.htmlhttps://patchthecve.com/cve/CVE-2024-49824.htmlWed, 17 Jun 2026 08:00:29 +0000MEDIUM 6.5: IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validationhttps://patchthecve.com/cve/CVE-2023-45189.htmlhttps://patchthecve.com/cve/CVE-2023-45189.htmlWed, 17 Jun 2026 06:28:23 +0000MEDIUM 6.5: A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.10, 23.0.0 through 23.0.10 may result in access to client vault credentials. This difficult to exploit vulnerability could allow a low privileged attacker to programmatically acchttps://patchthecve.com/cve/CVE-2023-43058.htmlhttps://patchthecve.com/cve/CVE-2023-43058.htmlWed, 17 Jun 2026 06:25:02 +0000MEDIUM 5.3: IBM Robotic Process Automation 23.0.9 is vulnerable to privilege escalation that affects ownership of projects. IBM X-Force ID: 247527.