CVE-2019-6504

—

CVSS 3.0

6.1 medium

EPSS

2%p80

Published

Feb 6, 2019 (Feb 6, 2019)

Modified

Jun 17, 2026

Description

Insufficient output sanitization in the Automic Web Interface (AWI), in CA Automic Workload Automation 12.0 to 12.2, allow attackers to potentially conduct persistent cross site scripting (XSS) attacks via a crafted object.

Vendors: broadcom
Products: automic workload automation
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.