CVE-2019-6504

Severity CVSS v4.0:
Pending analysis
Type:
CWE-79 Cross-Site Scripting (XSS)
Publication date:
06/02/2019
Last modified:
07/04/2021

Description

Insufficient output sanitization in the Automic Web Interface (AWI), in CA Automic Workload Automation 12.0 to 12.2, allow attackers to potentially conduct persistent cross site scripting (XSS) attacks via a crafted object.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:broadcom:automic_workload_automation:*:*:*:*:*:*:*:* 12.0 (including) 12.2 (including)