Products: 1
Vulnerabilities: 31
Known Exploited: 0
1
Critical Level Threats
7
High Level Threats
21
Medium Level Threats
2
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-39349
OrangeHRM Uses AES-ECB for Sensitive Data Encryption Enables Pattern Disclosure
Last Modified: Apr 13, 2026
Published: Apr 07, 2026
CVE-2026-39348
OrangeHRM is Missing Authorization Checks in AbstractFileController Subclasses Expose Job Specification and Vacancy Attachments
Last Modified: Apr 13, 2026
Published: Apr 07, 2026
CVE-2026-39347
OrangeHRM's Self‑Appraisal Submission of Admin Users Can Be Modified After Completion
Last Modified: Apr 10, 2026
Published: Apr 07, 2026
CVE-2026-39346
OrangeHRM has Improper Access Control Allowing Access to Disabled Modules via URL Encoding
Last Modified: Apr 10, 2026
Published: Apr 07, 2026
CVE-2026-39345
OrangeHRM Affected by Arbitrary File Read via Path Traversal in Email Template Loader
Last Modified: Apr 10, 2026
Published: Apr 07, 2026
Items Per Page
