Read the docs

frappe

Records322All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical20CVSS 9.0–10.0
CVSS high119CVSS 7.0–8.9

Exploited now

frappe records in CISA KEV

No frappe vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Erpnext 59 records HIGH Frappe 49 records HIGH Learning 22 records MEDIUM Frappe Hr 3 records LOW Frappe Crm 2 records HIGH Press 2 records LOW Helpdesk 1 record HIGH

Records

1 record in Helpdesk · all components

TI-2025-09754 CVE-2025-10655 · GHSA-8cv9-4g7x-5c7f

Frappe Helpdesk 1.14.0 — SQL Injection in dashboard get_dashboard_data

Priority HIGH 72

SQL Injection in Frappe HelpDesk in the dashboard get_dashboard_data due to unsafe concatenation of user-controlled parameters into dynamic SQL statements.This issue affects Frappe HelpDesk: 1.14.0.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00556 Published 2025-12-09 No fix listed CWE-89
Open these records in search →