Advisories · Technology
frappe hrms.
Every CVE that names frappe hrms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Frappe HRMS before 15.61.0 Permission Bypass via Expense Claim Advances API
- frappe hrms
- Broken access control
- CVSS 6.5 Medium
Frappe HR: Missing Authorization on PWA API Endpoints enables Cross-Employee Data access in HRMS
- frappe hrms
- Broken access control
- CVSS 6.5 Medium
Frappe HR: SQL Injection in HRMS Salary Payments via ECS Report
- frappe hrms
- SQL injection
- CVSS 8.3 High
Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing Validation
- frappe hrms
- SQL injection
- CVSS 5.3 Medium
Frappe HR (hrms) before 16.11.0 Missing Authorization via expire_allocation
- frappe hrms
- Broken access control
- CVSS 5.3 Medium
Frappe HR (hrms) before 16.11.0 Missing Authorization via get_account_and_amount
- frappe hrms
- Broken access control
- CVSS 7.1 High
Frappe HR: SQL Injection in HRMS Salary Payments Based on Payment Mode Report
- frappe hrms
- SQL injection
- CVSS 6.5 Medium
Frappe HR: Permission Bypass in HRMS Leave Details API
- frappe hrms
- Broken access control
- CVSS 6.5 Medium
Frappe HR has possibility of SQL Injection due to improper field sanitization
- frappe hrms
- SQL injection
- CVSS 6.5 Medium
Frappe HR has Improper Access Control on Files
- frappe hrms
- Broken access control
- CVSS 6.5 Medium
Frappe HR vulnerable to Improper Access Control
- frappe hrms
- Broken access control