Known vulnerabilities in ERPNext 15.119.0

Vendor: Frappe
Software: ERPNext
Version: 15.119.0
Software CPE: cpe:2.3:a:frappe:erpnext:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ERPNext version 15.119.0 ERPNext 15.119.0 is affected by 10 vulnerabilities: 4 medium, 6 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151478 - Missing Authorization
CWE-862 Low
No
No
15.121.0, 16.34.0 20.09.2026 SB2026092048
#VU151477 - Missing Authorization
CWE-862 Medium
No
No
15.121.0, 16.34.0 20.09.2026 SB2026092048
#VU151476 - Missing Authorization
CWE-862 Medium
No
No
15.121.3, 16.35.0 20.09.2026 SB2026092049
#VU151475 - Missing Authorization
CWE-862 Low
No
No
15.121.0, 16.34.0 20.09.2026 SB2026092048
#VU151473 - Missing Authorization
CWE-862 Medium
No
No
15.121.0, 16.34.0 20.09.2026 SB2026092048
#VU151472 - Missing Authorization
CWE-862 Low
No
No
15.121.0, 16.34.0 20.09.2026 SB2026092048
#VU151471 - Missing Authorization
CWE-862 Low
No
No
15.119.1, 16.32.0 20.09.2026 SB2026081375
#VU151470 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Low
No
No
15.119.1, 16.32.0 20.09.2026 SB2026081375
#VU151469 - Missing Authorization
CVE-2026-94113
CWE-862 Low
No
No
15.121.0, 16.34.0 20.09.2026 SB2026092048
#VU142378 - Improper Neutralization of Special Elements Used in a Template Engine
CWE-1336 Medium
No
No
15.119.1, 16.32.0 13.08.2026 SB2026081375