frappe

Records322All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical20CVSS 9.0–10.0

CVSS high119CVSS 7.0–8.9

Exploited now

frappe records in CISA KEV

No frappe vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Frappe Crm · all components

TI-2025-10499 CVE-2025-11461 · GHSA-33p9-qh39-m99v

HIGH 70

Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00374 Published 2025-11-26 No fix listed CWE-89

TI-2025-42384 CVE-2025-68928

LOW 24

Frappe CRM is an open-source customer relationship management tool.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00206 Published 2025-12-29 Fixed in 1.56.2 CWE-79