Broadcom Ca Client Automation vulnerabilities

2 CVEs affecting Broadcom Ca Client Automation, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-19231, published 2019-12-20.

More from Broadcom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-13656, published 2019-09-06. Critical severity, CVSS 9.8. EPSS: 5.8% chance of exploitation in the next 30 days. An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to execute arbitrary code.
• CVE-2019-19231, published 2019-12-20. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges.