CVE-2019-6504: XSS
Published Feb 6, 2019
·Updated
Insufficient output sanitization in the Automic Web Interface (AWI), in CA Automic Workload Automation 12.0 to 12.2, allow attackers to potentially conduct persistent cross site scripting (XSS) attacks via a crafted object.
Affected Software
1 affected component
Broadcom Automic Workload Automation>=12.0<=12.2
Event History
Feb 6, 2019
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Data Sourced
via NVD·12:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-6504?
CVE-2019-6504 has a medium severity rating due to the potential for persistent XSS attacks.
2
How do I fix CVE-2019-6504?
To fix CVE-2019-6504, ensure you upgrade to a later version of CA Automic Workload Automation beyond 12.2.
3
What software is affected by CVE-2019-6504?
CVE-2019-6504 affects versions 12.0 to 12.2 of CA Automic Workload Automation.
4
What type of attack does CVE-2019-6504 allow?
CVE-2019-6504 allows for persistent cross site scripting (XSS) attacks due to insufficient output sanitization.
5
Who is the vendor for the product affected by CVE-2019-6504?
The vendor for the affected product is Broadcom.