CVE-2025-1714: Perforce Gliffy

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Lack of Rate Limiting in Sign-up workflow in Perforce Gliffy prior to version 4.14.0-7 on Gliffy online allows attacker to enumerate valid user emails and potentially DOS the server

Affected products

• Perforce Gliffy: before 4.14.0-7 (fixed in 4.14.0-7)

Published 2025-03-05. Last modified 2026-06-17.