Skip to content
Noroxi

Perforce records

31 published records for vendor perforce.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
38.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

31 records
  • CVE-2007-0100
    41Plan

    The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote atta

    CriticalCVSS 10.0No exploitEPSS 2%

    perforce · perforce clientJan 8, 2007

  • CVE-2015-8965
    40Plan

    Rogue Wave JViews before 8.8 patch 21 and 8.9 before patch 1 allows remote attackers to execute arbitrary Java code that exists in the class

    CriticalCVSS 9.8No exploitEPSS 3%

    perforce · jviewsApr 6, 2017

  • CVE-2023-45849
    39Monitor

    Arbitrary Code Execution in Helix Core

    CriticalCVSS 9.8No exploitEPSS 1%

    perforce · helix coreNov 8, 2023

  • CVE-2024-3930
    39Monitor

    XML External Entity in Akana

    CriticalCVSS 9.8No exploitEPSS 0%

    perforce · akana apiJul 30, 2024

  • CVE-2024-10314
    34Monitor

    Unauthenticated Denial of Service via Auto Generation Function

    HighCVSS 8.7No exploitEPSS 0%

    helix · helix coreNov 11, 2024

  • CVE-2024-10345
    34Monitor

    Unauthenticated Denial of Service via Shutdown Function

    HighCVSS 8.7No exploitEPSS 0%

    helix · helix coreNov 11, 2024

  • CVE-2024-10344
    34Monitor

    Unauthenticated Denial of Service via Refuse Function

    HighCVSS 8.7No exploitEPSS 0%

    helix · helix coreNov 11, 2024

  • CVE-2008-1338
    32Monitor

    The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon cra

    HighCVSS 7.8No exploitEPSS 2%

    perforce · perforce serverMar 14, 2008

  • CVE-2007-6349
    32Monitor

    P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service (CPU consumpt

    HighCVSS 7.8No exploitEPSS 2%

    perforce · p4webDec 20, 2007

  • CVE-2024-0325
    31Monitor

    Command Injection in Helix Sync

    HighCVSS 7.8No exploitEPSS 1%

    perforce · helix syncFeb 1, 2024

  • CVE-2023-35767
    30Monitor

    Unauthenticated Remote Denial-of-Service via Shutdown Function in Helix Core

    HighCVSS 7.5No exploitEPSS 1%

    perforce · helix coreNov 8, 2023

  • CVE-2023-5759
    30Monitor

    Unauthenticated Remote Denial-of-Service via Buffer in Helix Core

    HighCVSS 7.5No exploitEPSS 1%

    perforce · helix coreNov 8, 2023

  • CVE-2023-45319
    30Monitor

    Unauthenticated Remote Denial-of-Service (Commit) in Helix Core

    HighCVSS 7.5No exploitEPSS 1%

    perforce · helix coreNov 8, 2023

  • CVE-2024-5249
    30Monitor

    SAML Replay in Akana

    HighCVSS 7.5No exploitEPSS 0%

    perforce · akana apiJul 30, 2024

  • CVE-2010-0934
    29Monitor

    The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute arbitrary operating-

    HighCVSS 7.1No exploitEPSS 2%

    perforce · perforce serverMar 5, 2010

  • CVE-2010-0933
    28Monitor

    Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files via a ..

    MediumCVSS 6.8No exploitEPSS 2%

    perforce · perforce serverMar 5, 2010

  • CVE-2018-1000147
    26Monitor

    An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.j

    MediumCVSS 6.5No exploitEPSS 1%

    perforce · perforceApr 5, 2018

  • CVE-2013-1410
    24Monitor

    Perforce P4web 2011.1 and 2012.1 has multiple XSS vulnerabilities

    MediumCVSS 6.1Proof of conceptEPSS 2%

    perforce · p4webFeb 12, 2020

  • CVE-2024-8067
    23Monitor

    Unicode "best fit" argument injection

    MediumCVSS 5.8No exploitEPSS 0%

    helix · helix coreSep 24, 2024

  • CVE-2008-1303
    22Monitor

    The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon cra

    MediumCVSS 5.0Proof of conceptEPSS 8%

    perforce · perforce serverMar 12, 2008

  • CVE-2008-1302
    21Monitor

    The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon cra

    MediumCVSS 5.0No exploitEPSS 2%

    perforce · perforce serverMar 12, 2008

  • CVE-2024-5250
    21Monitor

    Overly Verbose Errors in SAML Integration

    MediumCVSS 5.3No exploitEPSS 0%

    perforce · akana apiJul 30, 2024

  • CVE-2025-14591
    21Monitor

    PII Leak Due to Change in EOR Handling

    MediumCVSS 5.3No exploitEPSS 0%

    perforce · delphix continuous complianceDec 20, 2025

  • CVE-2010-0932
    20Monitor

    The FTP server in Perforce Server 2008.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) vi

    MediumCVSS 5.0No exploitEPSS 2%

    perforce · perforce serverMar 5, 2010

  • CVE-2010-0929
    20Monitor

    The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted dat

    MediumCVSS 5.0No exploitEPSS 1%

    perforce · perforce serverMar 5, 2010