CVE-2010-2193: Multiple unspecified vulnerabilities in the CA (1) PSFormX and (2) WebScan ActiveX controls, as distributed...

Security readout for executives and security teams

This is an old remote code execution issue in CA PSFormX and WebScan ActiveX controls that were distributed through CA Global Advisor until May 2009. If a legacy Windows endpoint still has those controls enabled, a remote attacker could potentially run code through unspecified vectors. The public bundle does not provide CVSS, CWE, exploit status, or a named patch. Exposure is most plausible on legacy Windows environments that installed CA Global Advisor PSFormX or WebScan ActiveX controls before May 2009 and still allow those controls to run. Modern environments without those legacy controls are unlikely to be affected based on the supplied evidence. Treat this as a legacy technology hygiene issue unless inventory finds affected controls. If present, prioritize removal or restriction because the impact is arbitrary code execution and the public record lacks enough detail to safely rely on compensating assumptions. Mitigation focus: Check current CA/Broadcom guidance for any vendor-specified remediation.; Inventory endpoints for CA PSFormX and WebScan ActiveX controls.; Remove obsolete CA Global Advisor ActiveX controls where business use is absent..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.