Is Kofax RPA impacted by the CVE-2022-22965 RCE (Spring4Shell) Vulnerability?
Kofax RPA has a set of patches to address this vulnerability. Please select the one for your Kofax RPA version:
|Version||Fix (download link)|
|10.4.0.x - 11.0.0.x||KofaxRPA-10.4.0.x-11.0.0.x.FIX1793157.zip|
Please note that only installation on Tomcat is affected as stated in the CVE article "The specific exploit requires the application to run on Tomcat as a WAR deployment"
Please check this article regularly for future progress of this investigation.
Level of Complexity
|Kofax RPA||10.4 and later|
Add any references to other internal or external articles