CVE-2022-22433

IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with. IBM X-Force ID: 224156.

• CWE-20

• https://exchange.xforce.ibmcloud.com/vulnerabilities/224156VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6573913Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/224156VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6573913Patch, Vendor Advisory

Published

May 5, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22423IBM Common Cryptographic Architecture (CCA 5.x MTM for 4767 …5.5
• CVE-2022-22424IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user t…5.5
• CVE-2022-22425"IBM InfoSphere Information Server 11.7 is potentially vulne…9.8
• CVE-2022-22426IBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.…3.3
• CVE-2022-22427IBM InfoSphere Information Server 11.7 is vulnerable to cros…6.1
• CVE-2022-2243An access control vulnerability in GitLab EE/CE affecting al…4.3
• CVE-2022-22434IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 co…4.6
• CVE-2022-22435IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-s…5.4
• CVE-2022-22436IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-s…5.4
• CVE-2022-2244An improper authorization vulnerability in GitLab EE/CE affe…4.3
• CVE-2022-22441IBM InfoSphere Information Server 11.7 could allow an authen…6.5
• CVE-2022-22442"IBM InfoSphere Information Server 11.7 could allow an authe…6.5