CVE-2022-36119

An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for a domain authenticated user to send a crafted message to the Blue Prism Server and accomplish a remote code execution attack that is possible because of insecure deserialization. Exploitation of this vulnerability allows for code to be executed in the context of the Blue Prism Server service.

• CWE-502

• https://blueprism.comProduct
• https://community.blueprism.com/discussion/security-vulnerability-notification-ssc-blue-prism-enterpriseVendor Advisory
• https://portal.blueprism.com/security-vulnerabilities-august-2022Permissions Required, Vendor Advisory
• https://blueprism.comProduct
• https://community.blueprism.com/discussion/security-vulnerability-notification-ssc-blue-prism-enterpriseVendor Advisory
• https://portal.blueprism.com/security-vulnerabilities-august-2022Permissions Required, Vendor Advisory

Published

Aug 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-36113Cargo is a package manager for the rust programming language…8.1
• CVE-2022-36114Cargo is a package manager for the rust programming language…6.5
• CVE-2022-36115An issue was discovered in Blue Prism Enterprise 6.0 through…7.1
• CVE-2022-36116An issue was discovered in Blue Prism Enterprise 6.0 through…5.3
• CVE-2022-36117An issue was discovered in Blue Prism Enterprise 6.0 through…3.1
• CVE-2022-36118An issue was discovered in Blue Prism Enterprise 6.0 through…5.3
• CVE-2022-36120An issue was discovered in Blue Prism Enterprise 6.0 through…8.1
• CVE-2022-36121An issue was discovered in Blue Prism Enterprise 6.0 through…5.3
• CVE-2022-36122The Automox Agent before 40 on Windows incorrectly sets perm…7.8
• CVE-2022-36123The Linux kernel before 5.18.13 lacks a certain clear operat…7.8
• CVE-2022-36124It is possible for a Reader to consume memory beyond the all…7.5
• CVE-2022-36125It is possible to crash (panic) an application by providing …7.5