CVE-2022-36118

CVE-2022-36118 affects Blue Prism Enterprise versions 6.0 through 7.01, allowing an authenticated user in a misconfigured environment to bypass access controls for the SetProcessAttributes administrative function. This medium-severity vulnerability (CVSS 5.3) requires high attack complexity and low privileges, enabling any logged-in user to publish, unpublish, or retire processes, an action normally restricted to users with "Edit Process" permissions. There is no evidence of active exploitation, public exploit code, or significant community discussion, indicating a low current threat level.