Log in Start free

Perforce

Products

ProductCVEsExploitedLatest
P4 (Helix Core)8–Oct 15, 2026
Puppet Enterprise5–Nov 3, 2026
Helix ALM2–Apr 15, 2025
Delphix2–Apr 17, 2025
Akana2–Sep 11, 2026
Gliffy1–Mar 5, 2025
BlazeMeter1–Dec 3, 2025
Helix Authentication Service1–Oct 13, 2026
Helix Core Server (P4D)1–Apr 24, 2026
Delphix Continuous Compliance1–Dec 20, 2025
Puppet Core1–Jul 3, 2026
Delphix Continuous Data1–Jul 16, 2026

Exploited and recent CVEs

  • CVE-2026-115731 Critical 9.4 Report Deserialization Code Execution 0.4%
  • CVE-2026-115732 Critical 9.0 Certificate Name Authorization Bypass 0.7%
  • CVE-2026-103509 High 8.5 Credential Disclosure in P4 Search Configuration API 0.2%
  • CVE-2026-103508 High 7.3 Path traversal via logging configuration in P4Search 0.4%
  • CVE-2026-109758 Critical 9.3 Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In a 0.4%
  • CVE-2026-103510 Critical 9.5 Authentication bypass via blank auth token in P4Search 0.4%
  • CVE-2026-103511 Medium 5.1 Arbitrary file-write via extension installation in P4Search 0.3%
  • CVE-2026-103512 Medium 5.3 Ticket host-binding bypass via spoofed client IP in P4Search 0.4%
  • CVE-2026-103507 High 7.5 Arbitrary file-write via log configuration path in P4Search 0.5%
  • CVE-2026-100102 Critical 9.5 RCE via exposed JDWP debug agent in P4Search 0.4%
  • CVE-2026-89212 High 8.6 XML External Entity in Akana API Platform 0.4%
  • CVE-2026-85978 Critical 9.8 Unauthenticated Remote Code Execution in Akana API Platform 1.4%
  • CVE-2026-14254 High 8.3 Improper Restriction of Excessive Authentication Attempts in Delphix Continuous Data 0.6%
  • CVE-2026-8804 Medium 6.7 Cleartext Storage of Sensitive Information for Puppet Resource API 0.1%
  • CVE-2026-8804 Medium 6.7 Cleartext Storage of Sensitive Information for Puppet Resource API 0.1%
  • CVE-2026-6902 High 7.7 Code Injection in Perforce P4 (Helix Core) 0.5%
  • CVE-2026-6043 High 8.8 Insecure Default Configuration in P4 Server 1.3%
  • CVE-2025-14591 Medium 5.3 PII Leak Due to Change in EOR Handling 0.3%
  • CVE-2025-13472 Medium 5.3 Missing authorization in BlazeMeter Jenkins Plugin 0.3%
  • CVE-2025-10360 Medium 6.9 Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5 0.2%
  • CVE-2025-5459 High 8.6 OS Command Injection 1.1%
  • CVE-2025-2903 High 8.5 Privilege Chaining in Delphix 0.2%
  • CVE-2025-3113 Critical 9.0 Improper Access Control in Delphix Masking Engine 0.3%
  • CVE-2024-11084 Medium 6.3 Potential Username Enumeration in Helix ALM 0.5%
  • CVE-2025-1714 Medium 6.9 Username Enumeration in Gliffy 0.4%
  • CVE-2024-3995 Low 2.0 Command Injection in Helix ALM 0.6%