CVE-2024-6922 Scanner
CVE-2024-6922 scanner - Server-Side Request Forgery (SSRF) vulnerability in Automation Anywhere Automation 360
Used 2.5k times · 3.3k assets checked · domain, ipv4, subdomain
CVE
CVE-2024-6922
6.9
CVSSmedium
Exploitable remotely over the internet · no authentication required.
Description
Automation Anywhere Automation 360 v21-v32 is vulnerable to Server-Side Request Forgery in a web API component. An attacker with unauthenticated access to the Automation 360 Control Room HTTPS service (port 443) or HTTP service (port 80) can trigger arbitrary web requests from the server.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
automation 360
Updated Sep 28, 2026View on NVD →
S4E scanner
CVE history: automation 360
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →