Approved changes feed: RSS · Atom

cpe:2.3:a:frappe:frappe_helpdesk:1.14.0:*:linux:*:*:*:*:*

part: a version: 1.14.0 update: *

VendorFrappe (a51f8b94-1fb6-5e30-97d7-fbeb544c71ba)
ProductFrappe Helpdesk (65cbbf2c-9d6f-5339-bbc7-7856639b2bbd)
Editionlinux
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-10655 vulnerable 2026-06-08 07:02:27.270216 Frappe Helpdesk 1.14.0 — SQL Injection in dashboard get_dashboard_data
SQL Injection in Frappe HelpDesk in the dashboard get_dashboard_data due to unsafe concatenation of user-controlled parameters into dynamic SQL statements.This issue affects Frappe HelpDesk: 1.14.0.
Published: 2025-12-09T14:49:53.280Z
Updated: 2025-12-09T15:06:24.237Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.