CVE-2021-28973

The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely…

published April 13, 2021

CVSS
—
EPSS
1%
Percentile
59.0
In the wild
Unconfirmed
What it is

The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00891 · 59.0th percentile
Published
2021-04-13T16:42Z
EPSS history
Timeline
  • 13 APR 16:42Z
    The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely…
    cvelistv5