Export limit exceeded: 425803 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2024-11084

Potential Username Enumeration in Helix ALM

Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Helix Alm
CVE-2024-3995

Command Injection in Helix ALM

In Helix ALM versions prior to 2024.2.0, a local command injection was identified. Reported by Bryan Riggins.

CVSS 4.0 · 2 Low EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Helix Alm
CVE-2021-28973

The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Helix Alm