Skip to content
Perforce vulnerabilities
Newest
-
perforce p4 (helix core)
Credential Disclosure in P4 Search Configuration API
CVE-2026-103509
8.5 High
-
perforce p4 (helix core)
Path traversal via logging configuration in P4Search
CVE-2026-103508
7.3 High
-
perforce helix authentication service
Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM...
CVE-2026-109758
9.3 Critical
-
perforce p4 (helix core)
Authentication bypass via blank auth token in P4Search
CVE-2026-103510
9.5 Critical
-
perforce p4 (helix core)
Arbitrary file-write via extension installation in P4Search
CVE-2026-103511
5.1 Medium
-
perforce p4 (helix core)
Ticket host-binding bypass via spoofed client IP in P4Search
CVE-2026-103512
5.3 Medium
-
perforce p4 (helix core)
Arbitrary file-write via log configuration path in P4Search
CVE-2026-103507
7.5 High
-
perforce p4 (helix core)
RCE via exposed JDWP debug agent in P4Search
CVE-2026-100102
9.5 Critical
-
perfoce p4 (helix core)
Authentication bypass via default auth token in P4Search
CVE-2026-100103
10.0 Critical
-
perforce puppet enterprise
Command Injection in Puppet Enterprise
CVE-2026-85979
8.6 High
-
perforce akana
XML External Entity in Akana API Platform
CVE-2026-89212
9.2 Critical
-
perforce akana
Unauthenticated Remote Code Execution in Akana API Platform
CVE-2026-85978
10.0 Critical
-
perforce delphix continuous data
Improper Restriction of Excessive Authentication Attempts in Delphix Continuous Data
CVE-2026-14254
8.3 High
-
perforce puppet core, puppet enterprise +1 more
Cleartext Storage of Sensitive Information for Puppet Resource API
CVE-2026-8804
Fix available
6.7 Medium
-
perforce p4 (helix core)
Code Injection in Perforce P4 (Helix Core)
CVE-2026-6902
7.7 High
-
perforce helix core server (p4d)
Insecure Default Configuration in P4 Server
CVE-2026-6043
Public exploit
8.8 High
-
perforce delphix continuous compliance
PII Leak Due to Change in EOR Handling
CVE-2025-14591
5.3 Medium
-
perforce blazemeter
Missing authorization in BlazeMeter Jenkins Plugin
CVE-2025-13472
Fix available
5.3 Medium
-
perforce puppet enterprise
Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5
CVE-2025-10360
6.9 Medium
-
perforce puppet enterprise, puppet enterprise +1 more
OS Command Injection
CVE-2025-5459
8.6 High
-
perforce delphix
Privilege Chaining in Delphix
CVE-2025-2903
8.5 High
-
perforce delphix
Improper Access Control in Delphix Masking Engine
CVE-2025-3113
9.0 Critical
-
perforce helix alm
Potential Username Enumeration in Helix ALM
CVE-2024-11084
6.3 Medium
-
perforce gliffy
Username Enumeration in Gliffy
CVE-2025-1714
6.9 Medium
-
helix core, perforce helix core +1 more
Unauthenticated Denial of Service via Auto Generation Function
CVE-2024-10314
8.7 High
-
helix core, perforce helix core +1 more
Unauthenticated Denial of Service via Refuse Function
CVE-2024-10344
8.7 High
-
helix core, perforce helix core +1 more
Unauthenticated Denial of Service via Shutdown Function
CVE-2024-10345
8.7 High
-
helix core, perforce helix core +1 more
Unicode "best fit" argument injection
CVE-2024-8067
5.8 Medium
-
akana api platform, perforce akana api +1 more
XML External Entity in Akana
CVE-2024-3930
6.3 Medium
-
akana api platform, perforce akana api +1 more
Overly Verbose Errors in SAML Integration
CVE-2024-5250
3.5 Low
-
akana api platform, perforce akana api +1 more
SAML Replay in Akana
CVE-2024-5249
5.4 Medium
-
perforce helix alm
Command Injection in Helix ALM
CVE-2024-3995
2.0 Low
-
helix sync, perforce helix sync +1 more
Command Injection in Helix Sync
CVE-2024-0325
3.6 Low
-
helix core, perforce helix core +1 more
Unauthenticated Remote Denial-of-Service via Buffer in Helix Core
CVE-2023-5759
7.5 High
-
helix core, perforce helix core +1 more
Unauthenticated Remote Denial-of-Service (Commit) in Helix Core
CVE-2023-45319
7.5 High
-
helix core, perforce helix core +1 more
Arbitrary Code Execution in Helix Core
CVE-2023-45849
9.0 Critical
-
helix core, perforce helix core, helix swarm +2 more
Unauthenticated Remote Denial-of-Service via Shutdown Function in Helix Core
CVE-2023-35767
7.5 High
-
perforce puppet enterprise, puppet enterprise +1 more
Broken Session Management in Puppet Enterprise
CVE-2023-5309
6.8 Medium
-
puppet server, perforce puppet enterprise, puppet enterprise +2 more
Denial of Service for Revocation of Auto Renewed Certificates
CVE-2023-5255
4.4 Medium
-
perforce puppet enterprise, puppet enterprise +1 more
A privilege escalation allowing remote code execution was discovered in the orchestration service.
CVE-2023-2530
9.8 Critical
-
puppet server, perforce puppet enterprise, puppet enterprise +2 more
A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2...
CVE-2023-1894
Fix available
5.3 Medium
-
perforce puppet bolt, puppet bolt +1 more
Sensitive Parameter Exposure in Puppet Bolt prior to 3.24
CVE-2022-2394
4.1 Medium
-
perforce puppet enterprise, puppet, puppet enterprise +2 more
A flaw was discovered in bolt-server and ace where running a task with sensitive parameters...
CVE-2021-27022
4.9 Medium
-
perforce puppet enterprise, puppet enterprise +1 more
Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export.
CVE-2021-27020
8.8 High
-
perforce helix alm
The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build...
CVE-2021-28973
4.9 Medium
-
perforce puppet enterprise, puppet server, enterprise +1 more +3 more
Puppet Server and PuppetDB provide useful performance and debugging information via their metrics...
CVE-2020-7943
Fix available
7.5 High
-
perforce p4web
Perforce P4web 2011.1 and 2012.1 has multiple XSS vulnerabilities
CVE-2013-1410
Public exploit
6.1 Medium
-
perforce puppet enterprise, puppet enterprise +1 more
The express install, which is the suggested way to install Puppet Enterprise, gives the user a...
CVE-2019-10694
9.8 Critical
-
perforce puppet enterprise, puppet enterprise +1 more
When users are configured to use startTLS with RBAC LDAP, at login time, the user's credentials...
CVE-2018-11749
9.8 Critical
-
perforce puppet enterprise, puppet enterprise +1 more
XSS Vulnerability in Puppet Enterprise Console
CVE-2018-6511
5.4 Medium
- Show olderLoading…