Advisories · Technology
Perforce P4 (Helix core).
Every CVE that names Perforce P4 (Helix core) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.5 High
Credential Disclosure in P4 Search Configuration API
- Perforce P4 (Helix core)
- CWE-1220
- CVSS 7.3 High
Path traversal via logging configuration in P4Search
- Perforce P4 (Helix core)
- Path traversal
- CVSS 9.5 CriticalCritical · CVSS 9+
Authentication bypass via blank auth token in P4Search
- Perforce P4 (Helix Core)
- CWE-636
- CVSS 5.1 Medium
Arbitrary file-write via extension installation in P4Search
- Perforce P4 (Helix Core)
- Path traversal
- CVSS 5.3 Medium
Ticket host-binding bypass via spoofed client IP in P4Search
- Perforce P4 (Helix Core)
- Authentication bypass
- CVSS 7.5 High
Arbitrary file-write via log configuration path in P4Search
- Perforce P4 (Helix Core)
- Path traversal
- CVSS 9.5 CriticalCritical · CVSS 9+
RCE via exposed JDWP debug agent in P4Search
- Perforce P4 (Helix Core)
- CWE-489
- CVSS 7.7 High
Code Injection in Perforce P4 (Helix Core)
- Perforce P4 (Helix Core)
- Code injection