CVE-2019-6504

中危 6.1CVE-2019-6504 · Published 06/02/2019 · updated 17/06/2026

要点

CVE-2019-6504 是影响 automic workload automation (broadcom) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：2.0%，高于 80.9% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
automic workload automation broadcom	`≥ 12.0, ≤ 12.2`	No fix yet

Description

Insufficient output sanitization in the Automic Web Interface (AWI), in CA Automic Workload Automation 12.0 to 12.2, allow attackers to potentially conduct persistent cross site scripting (XSS) attacks via a crafted object.

References

securityfocus.com/bid/106755 · Third Party Advisory
communities.ca.com/community/product-vulnerability-response/blog/2019/01/24/ca20190124-01-security-notice-for-ca-automic-workload-automation · Vendor Advisory
marc.info · Mailing List
packetstormsecurity.com/files/151325/CA-Automic-Workload-Automation-12.x-Cross-Site-Scripting.html · Third Party Advisory
sec-consult.com/en/blog/advisories/cross-site-scripting-in-ca-automic-workload-automation-web-interface-formerly-automic-automation-engine · Third Party Advisory
seclists.org/fulldisclosure/2019/Jan/61 · Mailing List
support.ca.com/us/product-content/recommended-reading/security-notices/CA20190124-01-security-notice-for-ca-automic-workload-automation.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free