[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjWcKX37wadE81E54fasgaQqQMyIjrGC92H-LaA9WZCQ":3,"g5a-risk:CVE-2018-8953":135},{"success":4,"data":5,"meta":133},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":39,"epssPercentile":14,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":51,"references":52,"referencesCount":68,"weaknesses":69,"weaknessesCount":78,"isActivelyExploited":79,"cisaInfo":14,"otxData":14,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":131,"notableEvents":132},"CVE-2018-8953","What is CVE-2018-8953?","CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request.","2018-04-11T17:29:00.473","2018-05-17T17:42:03.39",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":15,"CVSSMetricV2":28,"CVSSMetricV40":14},null,[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":12,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"TemporalSeverity":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"ModifiedAttackVector":14,"ModifiedAttackComplexity":14,"ModifiedPrivilegesRequired":14,"ModifiedUserInteraction":14,"ModifiedScope":14,"ModifiedConfidentialityImpact":14,"ModifiedIntegrityImpact":14,"ModifiedAvailabilityImpact":14,"EnvironmentalScore":14,"EnvironmentalSeverity":14},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",2.8,5.9,[29],{"Source":17,"Type":18,"CVSSData":30,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":14,"ObtainAllPrivilege":14,"ObtainUserPrivilege":14,"ObtainOtherPrivilege":14,"UserInteractionRequired":14},{"Version":31,"VectorString":32,"AccessVector":21,"AccessComplexity":22,"Authentication":33,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":14,"Exploitability":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"CollateralDamagePotential":14,"TargetDistribution":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"EnvironmentalScore":14},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.0266,[39,39,39,39,39,39,39],"High",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"ca","workload_automation_ae","*","cpe:2.3:a:ca:workload_automation_ae:*:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"r11.3.6","cpe:2.3:a:ca:workload_automation_ae:r11.3.6:sp1:*:*:*:*:*:*",2,[53,59,63],{"url":54,"source":55,"tags":56},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F103742","Securityfocus",[57,58],"Third Party Advisory","VDB Entry",{"url":60,"source":61,"tags":62},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1040605","Securitytracker",[57,58],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fsupport.ca.com\u002Fus\u002Fproduct-content\u002Frecommended-reading\u002Fsecurity-notices\u002Fca20180329-01--security-notice-for-ca-workload-automation-ae.html","Ca",[67],"Vendor Advisory",3,[70],{"id":71,"name":72,"description":73,"extendedDescription":74,"status":75,"abstraction":76,"structure":77},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","","Stable","Base","Simple",1,false,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2018-8953? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-8953, a high severity cyber security vulnerability from 2018. CA Workload Automation AE before r11.3.6 SP7 allows remote a...","CVE-2018-8953, CVE-2018-8953 vulnerability, CVE-2018-8953 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, ca security, workload_automation_ae vulnerability","\u002Fwhat-is\u002Fcve-2018-8953",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":9,"dateModified":10,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-8953","Cybersecurity","CVE-2018-8953, CVE-2018-8953 vulnerability, CVE-2018-8953 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107],{"Operator":14,"Negate":14,"Nodes":108},[109],{"Operator":110,"Negate":14,"CPEMatch":111},"OR",[112,114,116,119,122,125,128],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":113,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":49},"0FFEC523-E669-4952-87A7-72F156C37613",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":115,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"70B64F68-D841-4F9A-BF41-90E2C19C0277",{"Vulnerable":4,"Criteria":117,"MatchCriteriaID":118,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"cpe:2.3:a:ca:workload_automation_ae:r11.3.6:sp2:*:*:*:*:*:*","FF08B666-9951-4E8A-B297-7202F220F246",{"Vulnerable":4,"Criteria":120,"MatchCriteriaID":121,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"cpe:2.3:a:ca:workload_automation_ae:r11.3.6:sp3:*:*:*:*:*:*","E5BAEB0B-C443-4149-AC47-6BC7BC648379",{"Vulnerable":4,"Criteria":123,"MatchCriteriaID":124,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"cpe:2.3:a:ca:workload_automation_ae:r11.3.6:sp4:*:*:*:*:*:*","238C5D87-C85B-474F-97D7-843E529F1C22",{"Vulnerable":4,"Criteria":126,"MatchCriteriaID":127,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"cpe:2.3:a:ca:workload_automation_ae:r11.3.6:sp5:*:*:*:*:*:*","1461715D-EC38-4759-9552-D284AF7C9339",{"Vulnerable":4,"Criteria":129,"MatchCriteriaID":130,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"cpe:2.3:a:ca:workload_automation_ae:r11.3.6:sp6:*:*:*:*:*:*","E26BCF9E-1C65-443E-A99C-CE6AEA6C8863",[],[],{"lastModified":10,"cacheTime":134,"version":31},1792358026662,{"score":136,"band":137,"action":138,"scoredAt":139},47,"Medium","Plan remediation","2026-10-16T06:43:48.149954+00:00"]