CVE-2019-6504: Broadcom Automic Workload Automation

Medium severity, CVSS 6.1. EPSS: 2% chance of exploitation in the next 30 days.

Insufficient output sanitization in the Automic Web Interface (AWI), in CA Automic Workload Automation 12.0 to 12.2, allow attackers to potentially conduct persistent cross site scripting (XSS) attacks via a crafted object.

Affected products

• Broadcom Automic Workload Automation: from 12.0, up to and including 12.2

Published 2019-02-06. Last modified 2026-06-17.