Perforce
- Total products in the ecosystem
- 11
- Total vulnerabilities (90 days)
- 4
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 09/15/2026, Perforce recorded 4 security vulnerabilities in the last 90 days across 4 products, including 3 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Akana had the most security vulnerabilities in the Perforce ecosystem, with 2 vulnerabilities—approximately 50% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-89212XML External Entity in Akana API Platform | Exploitation statusNot known exploited | FixNot confirmed | Affected productAkana | Published09/11/2026 | SeverityCritical |
CVE-2026-85978Unauthenticated Remote Code Execution in Akana API Platform | Exploitation statusNot known exploited | FixNot confirmed | Affected productAkana | Published09/09/2026 | SeverityCritical |
CVE-2026-14254Improper Restriction of Excessive Authentication Attempts in Delphix Continuous Data | Exploitation statusNot known exploited | FixYes | Affected productDelphix Continuous Data | Published07/16/2026 | SeverityHigh |
CVE-2026-8804Cleartext Storage of Sensitive Information for Puppet Resource API | Exploitation statusNot known exploited | FixYes | Affected productPuppet Core | Published07/03/2026 | SeverityMedium |
CVE-2026-6902Code Injection in Perforce P4 (Helix Core) | Exploitation statusNot known exploited | FixYes | Affected productP4 (Helix Core) | Published05/18/2026 | SeverityHigh |
CVE-2026-6043Insecure Default Configuration in P4 Server | Exploitation statusNot known exploited | FixYes | Affected productHelix Core Server (P4D) | Published04/24/2026 | SeverityHigh |
CVE-2025-14591PII Leak Due to Change in EOR Handling | Exploitation statusNot known exploited | FixYes | Affected productDelphix Continuous Compliance | Published12/20/2025 | SeverityMedium |
CVE-2025-13472Missing authorization in BlazeMeter Jenkins Plugin | Exploitation statusNot known exploited | FixYes | Affected productBlazeMeter | Published12/03/2025 | SeverityMedium |
CVE-2025-10360Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5 | Exploitation statusNot known exploited | FixYes | Affected productPuppet Enterprise | Published09/24/2025 | SeverityMedium |
CVE-2025-5459OS Command Injection | Exploitation statusNot known exploited | FixYes | Affected productPuppet Enterprise | Published06/26/2025 | SeverityHigh |
CVE-2025-2903Privilege Chaining in Delphix | Exploitation statusNot known exploited | FixYes | Affected productDelphix | Published04/17/2025 | SeverityHigh |
CVE-2025-3113Improper Access Control in Delphix Masking Engine | Exploitation statusNot known exploited | FixYes | Affected productDelphix | Published04/17/2025 | SeverityCritical |
CVE-2024-11084Potential Username Enumeration in Helix ALM | Exploitation statusNot known exploited | FixYes | Affected productHelix ALM | Published04/15/2025 | SeverityMedium |
CVE-2025-1714Username Enumeration in Gliffy | Exploitation statusNot known exploited | FixYes | Affected productGliffy | Published03/05/2025 | SeverityMedium |
CVE-2024-3930XML External Entity in Akana | Exploitation statusNot known exploited | FixYes | Affected productAkana API Platform | Published07/30/2024 | SeverityMedium |
CVE-2024-5250Overly Verbose Errors in SAML Integration | Exploitation statusNot known exploited | FixYes | Affected productAkana API Platform | Published07/30/2024 | SeverityLow |
CVE-2024-5249SAML Replay in Akana | Exploitation statusNot known exploited | FixYes | Affected productAkana API Platform | Published07/30/2024 | SeverityMedium |
CVE-2024-3995Command Injection in Helix ALM | Exploitation statusNot known exploited | FixYes | Affected productHelix ALM | Published06/28/2024 | SeverityLow |
CVE-2024-0325Command Injection in Helix Sync | Exploitation statusNot known exploited | FixYes | Affected productSync | Published02/01/2024 | SeverityLow |
CVE-2023-5759Unauthenticated Remote Denial-of-Service via Buffer in Helix Core | Exploitation statusNot known exploited | FixYes | Affected productHelix Core | Published11/08/2023 | SeverityHigh |
CVE-2023-45319Unauthenticated Remote Denial-of-Service (Commit) in Helix Core | Exploitation statusNot known exploited | FixYes | Affected productHelix Core | Published11/08/2023 | SeverityHigh |
CVE-2023-45849Arbitrary Code Execution in Helix Core | Exploitation statusNot confirmed | FixYes | Affected productHelix Core | Published11/08/2023 | SeverityCritical |
CVE-2023-35767Unauthenticated Remote Denial-of-Service via Shutdown Function in Helix Core | Exploitation statusNot known exploited | FixYes | Affected productHelix Core | Published11/08/2023 | SeverityHigh |
CVE-2022-2394Sensitive Parameter Exposure in Puppet Bolt prior to 3.24 | Exploitation statusNot confirmed | FixNot confirmed | Affected productBolt | Published07/19/2022 | SeverityMedium |
CVE-2021-28973 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/13/2021 | SeverityUnknown |
CVE-2013-1410 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/12/2020 | SeverityUnknown |
CVE-2018-1000147 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/05/2018 | SeverityUnknown |
CVE-2015-8965 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/06/2017 | SeverityUnknown |
CVE-2010-0935 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/05/2010 | SeverityUnknown |
CVE-2010-0934 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/05/2010 | SeverityUnknown |
CVE-2010-0930 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/05/2010 | SeverityUnknown |
CVE-2010-0932 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/05/2010 | SeverityUnknown |
CVE-2010-0933 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/05/2010 | SeverityUnknown |
CVE-2010-0931 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/05/2010 | SeverityUnknown |
CVE-2010-0929 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/05/2010 | SeverityUnknown |
CVE-2008-1338 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/14/2008 | SeverityUnknown |
CVE-2008-1303 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/12/2008 | SeverityUnknown |
CVE-2008-1302 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/12/2008 | SeverityUnknown |
CVE-2007-6349 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/20/2007 | SeverityUnknown |
CVE-2007-0100 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/08/2007 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
.svg){kind=icon}
.svg){kind=icon}
