https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-49825.htmlhttps://patchthecve.com/cve/CVE-2024-49825.htmlWed, 17 Jun 2026 08:00:29 +0000MEDIUM 6.3: IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0 through 23.0.20 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.https://patchthecve.com/cve/CVE-2024-49824.htmlhttps://patchthecve.com/cve/CVE-2024-49824.htmlWed, 17 Jun 2026 08:00:29 +0000MEDIUM 6.5: IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validationhttps://patchthecve.com/cve/CVE-2024-51448.htmlhttps://patchthecve.com/cve/CVE-2024-51448.htmlWed, 17 Jun 2026 08:05:43 +0000MEDIUM 6.7: IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to escalate their privileges. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe shttps://patchthecve.com/cve/CVE-2024-51456.htmlhttps://patchthecve.com/cve/CVE-2024-51456.htmlWed, 17 Jun 2026 08:05:44 +0000MEDIUM 5.9: IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to obtain sensitive data that may be exposed through certain crypto-analytic attacks.https://patchthecve.com/cve/CVE-2022-33954.htmlhttps://patchthecve.com/cve/CVE-2022-33954.htmlWed, 17 Jun 2026 04:49:32 +0000MEDIUM 4.6: IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 could allow a user with psychical access to the system to obtain sensitive information due to insufficiently protected credentials.