CVE-2019-6504

MITTEL 6.1CVE-2019-6504 · Published 06/02/2019 · updated 17/06/2026

Kurz gesagt

CVE-2019-6504 ist eine Schwachstelle (MITTEL (CVSS 6.1)) in automic workload automation (broadcom).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.0%, höher als bei 80.9% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
automic workload automation broadcom	`≥ 12.0, ≤ 12.2`	No fix yet

Description

Insufficient output sanitization in the Automic Web Interface (AWI), in CA Automic Workload Automation 12.0 to 12.2, allow attackers to potentially conduct persistent cross site scripting (XSS) attacks via a crafted object.

References

securityfocus.com/bid/106755 · Third Party Advisory
communities.ca.com/community/product-vulnerability-response/blog/2019/01/24/ca20190124-01-security-notice-for-ca-automic-workload-automation · Vendor Advisory
marc.info · Mailing List
packetstormsecurity.com/files/151325/CA-Automic-Workload-Automation-12.x-Cross-Site-Scripting.html · Third Party Advisory
sec-consult.com/en/blog/advisories/cross-site-scripting-in-ca-automic-workload-automation-web-interface-formerly-automic-automation-engine · Third Party Advisory
seclists.org/fulldisclosure/2019/Jan/61 · Mailing List
support.ca.com/us/product-content/recommended-reading/security-notices/CA20190124-01-security-notice-for-ca-automic-workload-automation.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free