All vulnerabilities

Servers and applications

CVE-2019-14966

An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. There exists an authenticated SQL injection.

Severity
High 8.8
Published
12 Aug 2019
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Exploit chance
1.7% in the next 30 daysHigher than 77% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Frappe FrameworkServers and applications · cpe:a:frappe:frappe
  • From 10.0.0 up to 12.0.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-14966
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-14966