orangehrm Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by orangehrm

JSON RSS CSV 🔔 Create Alert Trigger

29 November 2025

Session Management Flaw in OrangeHRM Human Resource Management System
CVE-2025-66289
OrangehrmOrangehrm8.7HIGH
Account Takeover Vulnerability in OrangeHRM Human Resource Management System
CVE-2025-66225
OrangehrmOrangehrm8.7HIGH
Input Neutralization Vulnerability in OrangeHRM Human Resource Management System
CVE-2025-66224
OrangehrmOrangehrm9CRITICAL

21 May 2025

Privilege Escalation Vulnerability in OrangeHRM by OrangeHRM
CVE-2025-44040
OrangeHRMOrangeHRM7.2HIGH

27 May 2024

OrangeHRM 3.3.3 vulnerable to SQL injection
CVE-2024-36428
OrangeHRMOrangehrmEPSS 77%8.1HIGH

5 January 2021

SQL Injection Vulnerability in OrangeHRM Buzz Module
CVE-2020-29437
OrangehrmOrangehrm8.1HIGH

15 June 2019

Input Validation Flaw in OrangeHRM Allows Command Execution by Authenticated Users
CVE-2019-12839
OrangehrmOrangehrm8.8HIGH