Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: frappe hrms 16.11.0 Clear all filters
TI-2026-70712 CVE-2026-108733 · GHSA-7xfq-498m-4hrf

Missing authorization in Frappe HR lets users expire leave allocations

Priority LOW 24

Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization vulnerability in the whitelisted expire_allocation method that allows authenticated users to expire…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00259 Published 2026-10-11 Fixed in 16.11.0 CWE-862
TI-2026-70711 CVE-2026-108732 · GHSA-f4w9-fc3h-w6qm

Missing authorization in Frappe HR exposes employee payroll amounts

Priority MEDIUM 57

Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization vulnerability in the whitelisted get_account_and_amount method that lets authenticated users read pa…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00349 Published 2026-10-11 Fixed in 16.11.0 CWE-862