← Database

CVE-2026-39347

LOW CVSS: 2.7 Published: 2026-04-07 Modified: 2026-07-24

Description

OrangeHRM is a comprehensive human resource management (HRM) system. From 5.0 to 5.8, OrangeHRM Open Source accepts changes to self-appraisal submissions for administrator users after those submissions have been marked completed, breaking integrity of finalized appraisal records. This vulnerability is fixed in 5.8.1.

Affected Platforms

Orangehrm Orangehrm

Weakness Type

CWE-285

References