AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-6922

UNKNOWN · CVSS N/A EPSS 30.17%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-07-26 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. Its EPSS score suggests a 30.2% probability of exploitation in the next 30 days.

CVE
CVE-2024-6922
Severity
UNKNOWN
CVSS
N/A
EPSS
30.17%

Original NVD Description

Automation Anywhere Automation 360 v21-v32 is vulnerable to Server-Side Request Forgery in a web API component. An attacker with unauthenticated access to the Automation 360 Control Room HTTPS service (port 443) or HTTP service (port 80) can trigger arbitrary web requests from the server.