← All advisories

Critical severity9.8NVD Advisory· Published Apr 11, 2018· Updated Jun 17, 2026

CVE-2018-8954

CVE-2018-8954

Description

CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8

Ca/Workload Control Center6 versions
cpe:2.3:a:ca:workload_control_center:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:ca:workload_control_center:*:*:*:*:*:*:*:*range: <=r11.4
- cpe:2.3:a:ca:workload_control_center:sp1:*:*:*:*:*:*:*
- cpe:2.3:a:ca:workload_control_center:sp2:*:*:*:*:*:*:*
- cpe:2.3:a:ca:workload_control_center:sp3:*:*:*:*:*:*:*
- cpe:2.3:a:ca:workload_control_center:sp4:*:*:*:*:*:*:*
- cpe:2.3:a:ca:workload_control_center:sp5:*:*:*:*:*:*:*
Unicenter/Workload Control Centerllm-fuzzy
Range: < r11.4 SP6
CA Technologies/Workload Control Centerv5
Range: r11.4 SP5 and earlier

Patches

Vulnerability mechanics

References

3

www.securityfocus.com/bid/103742nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040605nvdThird Party AdvisoryVDB Entry
support.ca.com/us/product-content/recommended-reading/security-notices/ca20180329-01--security-notice-for-ca-workload-automation-ae.htmlnvdVendor Advisory

News mentions

0

No linked articles in our index yet.