Products: 1
Vulnerabilities: 3
Known Exploited: 0
0
Critical Level Threats
2
High Level Threats
0
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2024-41226
A CSV injection vulnerability in Automation Anywhere Automation 360 version 21094 allows attackers to execute arbitrary code via a crafted payload. NOTE: Automation Anywhere disputes this report, arguing the attacker executes everything from the client side and does not attack the Control Room. The payload is being injected in the http Response from the client-side, so the owner of the Response and payload is the end user in this case. They contend that the server's security controls have no impact or role to play in this situation and therefore this is not a valid vulnerability.
Last Modified: Sep 03, 2024
Published: Aug 06, 2024
CVE-2024-6922
Server-Side Request Forgery in Automation 360
Last Modified: Apr 15, 2026
Published: Jul 26, 2024
CVE-2022-29856
A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages.
Last Modified: Nov 21, 2024
Published: Apr 29, 2022
Items Per Page
