Login Request a demo
PE
Vendor
Perforce
19 products with CVEs on record
44
CVEs
0
On KEV
8
New 30D
Products
PH
P4 (Helix core)
Perforce
9.5
8 CVEs0 on KEV7 new
HA
Helix Authentication Service
Perforce
9.3
1 CVEs0 on KEV1 new
PS
Perforce Server
Perforce
–
10 CVEs0 on KEV0 new
HC
Helix Core
Perforce
9.8
4 CVEs0 on KEV0 new
AA
Akana Api
Perforce
9.8
3 CVEs0 on KEV0 new
PE
Puppet Enterprise
Perforce
8.8
3 CVEs0 on KEV0 new
AK
Akana
Perforce
9.8
2 CVEs0 on KEV0 new
P4
P4web
Perforce
6.1
2 CVEs0 on KEV0 new
BL
BlazeMeter
Perforce
5.3
1 CVEs0 on KEV0 new
DC
Delphix Continuous Compliance
Perforce
7.5
1 CVEs0 on KEV0 new
DC
Delphix Continuous Data
Perforce
8.3
1 CVEs0 on KEV0 new
HA
Helix Alm
Perforce
4.9
1 CVEs0 on KEV0 new
HC
Helix Core Server (P4D)
Perforce
8.8
1 CVEs0 on KEV0 new
HS
Helix Sync
Perforce
7.8
1 CVEs0 on KEV0 new
JV
Jviews
Perforce
9.8
1 CVEs0 on KEV0 new
PE
Perforce
Perforce
6.5
1 CVEs0 on KEV0 new
PC
Perforce Client
Perforce
–
1 CVEs0 on KEV0 new
PB
Puppet Bolt
Perforce
3.5
1 CVEs0 on KEV0 new
PC
Puppet Core
Perforce
6.7
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-103509
PH
P4 (Helix core)
Perforce
8.5
0%
Oct 15Credential Disclosure in P4 Search Configuration API
CVE-2026-103508
PH
P4 (Helix core)
Perforce
7.3
0%
Oct 15Path traversal via logging configuration in P4Search
CVE-2026-109758
HA
Helix Authentication Service
Perforce
9.3
0%
Oct 13Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable…
CVE-2026-103510
PH
P4 (Helix Core)
Perforce
9.5
0%
Oct 5Authentication bypass via blank auth token in P4Search
CVE-2026-103511
PH
P4 (Helix Core)
Perforce
5.1
0%
Oct 5Arbitrary file-write via extension installation in P4Search
CVE-2026-103512
PH
P4 (Helix Core)
Perforce
5.3
0%
Oct 5Ticket host-binding bypass via spoofed client IP in P4Search
CVE-2026-103507
PH
P4 (Helix Core)
Perforce
7.5
1%
Oct 5Arbitrary file-write via log configuration path in P4Search
CVE-2026-100102
PH
P4 (Helix Core)
Perforce
9.5
0%
Oct 5RCE via exposed JDWP debug agent in P4Search
CVE-2026-89212
AK
Akana
Perforce
8.6
0%
Sep 11XML External Entity in Akana API Platform
CVE-2026-85978
AK
Akana
Perforce
9.8
1%
Sep 9Unauthenticated Remote Code Execution in Akana API Platform
CVE-2026-14254
DC
Delphix Continuous Data
Perforce
8.3
1%
Jul 16Improper Restriction of Excessive Authentication Attempts in Delphix Continuous Data
CVE-2026-8804
PE
Puppet Enterprise
Perforce
6.7
0%
Jul 3Cleartext Storage of Sensitive Information for Puppet Resource API
CVE-2026-6902
PH
P4 (Helix Core)
Perforce
7.7
0%
May 18Code Injection in Perforce P4 (Helix Core)
CVE-2026-6043
HC
Helix Core Server (P4D)
Perforce
8.8
1%
Apr 24Insecure Default Configuration in P4 Server
CVE-2025-14591
DC
Delphix Continuous Compliance
Perforce
7.5
0%
Dec 20PII Leak Due to Change in EOR Handling
CVE-2025-13472
BL
BlazeMeter
Perforce
5.3
0%
Dec 3Missing authorization in BlazeMeter Jenkins Plugin
CVE-2025-10360
PE
Puppet Enterprise
Perforce
6.9
0%
Sep 24Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5
CVE-2025-5459
PE
Puppet Enterprise
Perforce
8.8
1%
Jun 26OS Command Injection
CVE-2024-5250
AA
Akana Api
Perforce
5.3
0%
Jul 30In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML integrations
CVE-2024-5249
AA
Akana Api
Perforce
7.5
0%
Jul 30In versions of Akana API Platform prior to 2024.1.0, SAML tokens can be replayed
CVE-2024-3930
AA
Akana Api
Perforce
9.8
0%
Jul 30In versions of Akana API Platform prior to 2024.1.0 a flaw resulting in XML External Entity (XXE) was discovered
CVE-2024-0325
HS
Helix Sync
Perforce
7.8
1%
Feb 1In Helix Sync versions prior to 2024.1, a local command injection was identified
CVE-2023-5759
HC
Helix Core
Perforce
7.5
1%
Nov 8In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the buffer was identified
CVE-2023-45849
HC
Helix Core
Perforce
9.8
1%
Nov 8An arbitrary code execution which results in privilege escalation was discovered in Helix Core versions prior to 2023.2
CVE-2023-45319
HC
Helix Core
Perforce
7.5
1%
Nov 8In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the commit function was identified
CVE-2023-35767
HC
Helix Core
Perforce
7.5
1%
Nov 8In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified
CVE-2022-2394
PB
Puppet Bolt
Perforce
3.5
1%
Jul 19Puppet Bolt prior to version 3.24.0 will print sensitive parameters when planning a run resulting in them potentially being logged when run programmatically, such as via Puppet…
CVE-2021-28973
HA
Helix Alm
Perforce
4.9
1%
Apr 13The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software…
CVE-2013-1410
P4
P4web
Perforce
6.1
2%
Feb 12Perforce P4web 2011.1 and 2012.1 has multiple XSS vulnerabilities
CVE-2018-1000147
PE
Perforce
Perforce
6.5
1%
Apr 5An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with…
CVE-2015-8965
JV
Jviews
Perforce
9.8
3%
Apr 6Rogue Wave JViews before 8.8 patch 21 and 8.9 before patch 1 allows remote attackers to execute arbitrary Java code that exists in the classpath, such as test code or…
CVE-2010-0935
PS
Perforce Server
Perforce
–
2%
Mar 5Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain super privileges via a "p4 protect" command
CVE-2010-0934
PS
Perforce Server
Perforce
–
2%
Mar 5The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute arbitrary operating-system commands by using a "p4 client"…
CVE-2010-0933
PS
Perforce Server
Perforce
–
2%
Mar 5Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files via a
CVE-2010-0932
PS
Perforce Server
Perforce
–
2%
Mar 5The FTP server in Perforce Server 2008.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a certain MKD command
CVE-2010-0931
PS
Perforce Server
Perforce
–
1%
Mar 5The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted data, possibly involving a large sndbuf…
CVE-2010-0930
PS
Perforce Server
Perforce
–
1%
Mar 5The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (infinite loop) via crafted data that includes a byte sequence of…
CVE-2010-0929
PS
Perforce Server
Perforce
–
1%
Mar 5The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted data beginning with a byte sequence of…
CVE-2008-1338
PS
Perforce Server
Perforce
–
2%
Mar 14The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a server-DiffFile command with…
CVE-2008-1303
PS
Perforce Server
Perforce
–
8%
Mar 12The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a missing parameter to the (1)…
CVE-2008-1302
PS
Perforce Server
Perforce
–
2%
Mar 12The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (1) server-DiffFile or (2)…
CVE-2007-6349
P4
P4web
Perforce
–
2%
Dec 20P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with an empty…
CVE-2007-0100
PC
Perforce Client
Perforce
–
2%
Jan 8The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite arbitrary files by…