Perforce
Security Risk Profile
54
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 43 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 8, 2007 to present
43
Total CVEs
24
Critical+High
0
Exploited
20
Unpatched
Threat Assessment
Avg CVSS
7.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
20
Critical/High
Risk Level
54/100
medium
Severity Distribution
Critical
9High
15Medium
16Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
8Age Distribution
Common Weaknesses (CWE)
1
Code Injection
4
2
Infoleak
4
3
Path Traversal
4
4
Input Validation
4
5
XEE
2
Most Affected Products
1. Perforce Perforce Server47
2. Perforce Helix Core Server12
3. SolarWinds Access Rights Manager10
4. Perforce Helix Core8
5. Ivanti Endpoint Manager6
Recent Vulnerabilities
See more →CVE-2026-6902
CVSS 7.7high
Code Injection in Perforce P4 (Helix Core)
5/18/2026🔧 No Patch
CVE-2026-6043
CVSS 8.8EPSS 0%high
Insecure Default Configuration in P4 Server
4/24/2026🔧 No Patch
CVE-2025-14591
CVSS 7.5high
PII Leak Due to Change in EOR Handling
12/20/2025
CVE-2024-11084
CVSS 6.3medium
Potential Username Enumeration in Helix ALM
4/15/2025🔧 No Patch
CVE-2025-1714
CVSS 6.9medium
Username Enumeration in Gliffy
3/5/2025🔧 No Patch
CVE-2024-10314
CVSS 8.7high
Unauthenticated Denial of Service via Auto Generation Function
11/11/2024🔧 No Patch
CVE-2024-10344
CVSS 8.7high
Unauthenticated Denial of Service via Refuse Function
11/11/2024🔧 No Patch
CVE-2024-10345
CVSS 8.7high
Unauthenticated Denial of Service via Shutdown Function
11/11/2024🔧 No Patch
CVE-2024-8067
CVSS 5.8EPSS 0%medium
Unicode "best fit" argument injection
9/24/2024🔧 No Patch
CVE-2024-3930
CVSS 9.8critical
XML External Entity in Akana
7/30/2024🔧 No Patch
Monitor Perforce in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.