Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2026-85978

Unauthenticated Remote Code Execution in Akana API Platform

An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates attacker-supplied script code without sandboxing, resulting in arbitrary code execution. Exploitation requires no authentication or user interaction.

CVSS 4.0 · 10 Critical EPSS 1.4% KEV · Not listed
Vendors
Perforce
Products
Akana Api
CVE-2026-89212

XML External Entity in Akana API Platform

A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 (including older unsupported versions of Akana) and has been fixed as a security patch in the latest release of supported versions.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Akana Api
CVE-2024-5249

SAML Replay in Akana

In versions of Akana API Platform prior to 2024.1.0, SAML tokens can be replayed.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Akana Api
CVE-2024-5250

Overly Verbose Errors in SAML Integration

In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML integrations

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Akana Api
CVE-2024-3930

XML External Entity in Akana

In versions of Akana API Platform prior to 2024.1.0 a flaw resulting in XML External Entity (XXE) was discovered.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Akana Api