P
Vendor security profile
Perforce
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical4
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS7.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
1
6
CVE KEV
CVE severity distribution
7toplam CVE
Critical4 (57%)
High1 (14%)
Medium2 (29%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
7Unknown
Latest vulnerabilities
9.3
CVE-2026-109758
Use of hard-coded credentials in Perforce Helix Authentication Service
P
Patch status unknownEPSS %1
9.5
CVE-2026-103510
Authentication bypass via blank auth token in P4Search
P
Patch status unknownEPSS %0
5.1
CVE-2026-103511
Arbitrary file-write via extension installation in P4Search
P
Patch status unknownEPSS %0
5.3
CVE-2026-103512
Ticket host-binding bypass via spoofed client IP in P4Search
P
Patch status unknownEPSS %0
7.5
CVE-2026-103507
Arbitrary file-write via log configuration path in P4Search
P
Patch status unknownEPSS %1
9.5
CVE-2026-100102
RCE via exposed JDWP debug agent in P4Search
P
Patch status unknownEPSS %0
8.6
CVE-2026-85979
Command Injection in Puppet Enterprise
PS
Patch status unknownEPSS %1
9.2
CVE-2026-89212
XML External Entity in Akana API Platform
P
Patch status unknownEPSS %0