Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17

Export CSV
CVE-2026-103508

Path traversal via logging configuration in P4Search

P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search service account. This issue affects P4 Search 2026.4.2 and earlier. Perforce resolved it in 2026.4.3.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Helix Core
CVE-2026-100103

Authentication bypass via default auth token in P4Search

Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the connected P4 Server.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Helix Core
CVE-2026-100102

RCE via exposed JDWP debug agent in P4Search

Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server.

CVSS 4.0 · 9.5 Critical EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Helix Core
CVE-2026-103507

Arbitrary file-write via log configuration path in P4Search

Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can write arbitrary files on the host, potentially leading to code execution as the P4 Search service account.

CVSS 4.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Helix Core
CVE-2026-103512

Ticket host-binding bypass via spoofed client IP in P4Search

Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address when validating certain authentication requests. An attacker holding a stolen P4 Server ticket can bypass host-based ticket restrictions and trusted-address controls, gaining access to P4 Search as the ticket's owner.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Helix Core
CVE-2026-103511

Arbitrary file-write via extension installation in P4Search

Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Helix Core
CVE-2026-103510

Authentication bypass via blank auth token in P4Search

P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server.

CVSS 4.0 · 9.5 Critical EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Helix Core
CVE-2026-6902

Code Injection in Perforce P4 (Helix Core)

A Remote Code Execution vulnerability in P4 (Helix Core) Server's Command-Line Client, prior to the 2025.2 Patch 2, has been fixed to address potential security risks.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Helix Core
CVE-2026-6043

Insecure Default Configuration in P4 Server

P4 Server versions prior to 2026.1 are configured with insecure default settings that, when exposed to untrusted networks, allow unauthenticated attackers to create arbitrary user accounts, enumerate existing users, authenticate to accounts with no password set, and access depot contents via the built-in 'remote' user. These default settings, taken together, can lead to unauthorized access to source code repositories and other managed assets. The 2026.1 release, expected in May 2026, enforces secure-by-default configurations on upgrade and new installations

CVSS 4.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Perforce
Products
Helix Core Server P4d
CVE-2024-10344

Unauthenticated Denial of Service via Refuse Function

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the refuse function was identified. Reported by Karol Więsek.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Helix Core
CVE-2024-10314

Unauthenticated Denial of Service via Auto Generation Function

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the auto-generation function was identified. Reported by Karol Więsek.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Helix Core
CVE-2024-10345

Unauthenticated Denial of Service via Shutdown Function

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. Reported by Karol Więsek.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Helix Core
CVE-2024-8067

Unicode "best fit" argument injection

In versions of Helix Core prior to 2024.1 Patch 2 (2024.1/2655224) a Windows ANSI API Unicode "best fit" argument injection was identified.

CVSS 4.0 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Perforce
Products
Helix Core
CVE-2023-5759

Unauthenticated Remote Denial-of-Service via Buffer in Helix Core

In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the buffer was identified. Reported by Jason Geffner.  

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Perforce
Products
Helix Core
CVE-2023-45849

Arbitrary Code Execution in Helix Core

An arbitrary code execution which results in privilege escalation was discovered in Helix Core versions prior to 2023.2. Reported by Jason Geffner.

CVSS 3.1 · 9 Critical EPSS 1.2% KEV · Not listed
Vendors
Perforce
Products
Helix Core
CVE-2023-45319

Unauthenticated Remote Denial-of-Service (Commit) in Helix Core

In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the commit function was identified. Reported by Jason Geffner. 

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Perforce
Products
Helix Core
CVE-2023-35767

Unauthenticated Remote Denial-of-Service via Shutdown Function in Helix Core

In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. Reported by Jason Geffner.  

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Perforce
Products
Helix Core