Perforce vulnerabilities
25 CVEs and advisories name Perforce as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-115731Report Deserialization Code Execution
- CVE-2026-115732Certificate Name Authorization Bypass
- CVE-2026-103509Credential Disclosure in P4 Search Configuration API
- CVE-2026-103508Path traversal via logging configuration in P4Search
- CVE-2026-109758Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized acc
- CVE-2026-103510Authentication bypass via blank auth token in P4Search
- CVE-2026-103511Arbitrary file-write via extension installation in P4Search
- CVE-2026-103512Ticket host-binding bypass via spoofed client IP in P4Search
- CVE-2026-103507Arbitrary file-write via log configuration path in P4Search
- CVE-2026-100102RCE via exposed JDWP debug agent in P4Search
- CVE-2026-89212XML External Entity in Akana API Platform
- CVE-2026-85978Unauthenticated Remote Code Execution in Akana API Platform
- CVE-2026-14254Improper Restriction of Excessive Authentication Attempts in Delphix Continuous Data
- CVE-2026-8804Cleartext Storage of Sensitive Information for Puppet Resource API
- CVE-2026-6902Code Injection in Perforce P4 (Helix Core)
- CVE-2026-6043Insecure Default Configuration in P4 Server
- CVE-2025-14591PII Leak Due to Change in EOR Handling
- CVE-2025-13472Missing authorization in BlazeMeter Jenkins Plugin
- CVE-2025-10360Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5
- CVE-2025-5459OS Command Injection
- CVE-2025-2903Privilege Chaining in Delphix
- CVE-2025-3113Improper Access Control in Delphix Masking Engine
- CVE-2024-11084Potential Username Enumeration in Helix ALM
- CVE-2025-1714Username Enumeration in Gliffy
- CVE-2024-3995Command Injection in Helix ALM