Codeastro Simple Online Leave Management System vulnerabilities

4 CVEs affecting Codeastro Simple Online Leave Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-15559, published 2026-07-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-15134, published 2026-07-09. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /SimpleOnlineLeave/index.php. Executing a…
CVE-2026-15559, published 2026-07-13. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler.…
CVE-2026-15558, published 2026-07-13. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A security vulnerability has been detected in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file…
CVE-2026-15523, published 2026-07-13. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/dashboard.php. This…