CVE-2024-3995CWE-94

Command Injection in Helix ALM

Low · published June 28, 2024

CVSS v4.0
2.0
EPSS
1%
Percentile
48.6
In the wild
Unconfirmed
What it is

In Helix ALM versions prior to 2024.2.0, a local command injection was identified. Reported by Bryan Riggins.

The record
Technical detail
CVSS v4.0
2.0 · LOW
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00612 · 48.6th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2024-06-28T19:46Z
EPSS history
Timeline
  • 28 JUN 19:46Z
    Command Injection in Helix ALM
    cvelistv5