Back to Database
Status published
Medium
CVE-2024-6922
Server-Side Request Forgery in Automation 360
Vulnerability Description
Automation Anywhere Automation 360 v21-v32 is vulnerable to Server-Side Request Forgery in a web API component. An attacker with unauthenticated access to the Automation 360 Control Room HTTPS service (port 443) or HTTP service (port 80) can trigger arbitrary web requests from the server.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-6922
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
Automationanywhere
View all reports →Affected Software
Automation 360
Vulnerable Versions:
21
Timeline
Official Publish:
July 26th, 2024
Last Modified:
August 1st, 2024
Added to House:
July 22nd, 2026