Perforce Helix Alm vulnerabilities

3 vulnerabilities

Known vulnerabilities in Perforce Helix Alm, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.9CVE-2021-28973perforcehelix_alm
EPSS score
0.89%
The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks.6.3CVE-2024-11084perforcehelix_alm
EPSS score
0.46%
Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists.2CVE-2024-3995perforcehelix_alm
EPSS score
0.61%
In Helix ALM versions prior to 2024.2.0, a local command injection was identified. Reported by Bryan Riggins.