Skip to contentDolibarr vulnerabilities
Newest
- dolibarr erp\/crmDolibarr ERP CRM vulnerable to remote code execution (RCE)CVE-2024-40137Fix available5.5 Medium
- dolibarr erp\/crmDolibarr arbitrary file upload vulnerabilityCVE-2024-37821Fix available8.8 High
- dolibarrReflected Cross-Site Scripting (XSS) in DolibarrCVE-2024-34051Fix availableEPSS 12.0%4.6 Medium
- dolibarr, dolibarr erp cms, erp\/crm +2 moreMultiple vulnerabilities in DOLIBARR's ERP CMSCVE-2024-5315Fix availableEPSS 34.5%9.1 Critical
- dolibarr erp cms, erp\/crm +1 moreMultiple vulnerabilities in DOLIBARR's ERP CMSCVE-2024-5314Fix available9.1 Critical
- dolibarr erp\/crmDolibarr vulnerable to Cross-Site Request ForgeryCVE-2024-31503Fix available7.5 High
- dolibarr erp\/crmDolibarr ERP CRM Code Injection vulnerability during installationCVE-2024-29477Fix available8.8 High
- dolibarr, dolibarr erp\/crm +1 moreDolibarr Application Home Page HTML injection vulnerabilityCVE-2024-23817Fix available7.1 High
- dolibarr erp crm, erp\/crm +1 moreDolibarr ERP CRM (<= 17.0.3) Improper Access ControlCVE-2023-4198Fix available6.5 Medium
- dolibarr erp crm, erp\/crm +1 moreDolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCECVE-2023-4197Public exploitFix availableEPSS 36.2%7.5 High
- dolibarr, dolibarr dolibarr/dolibarr, erp\/crm +2 moreCross-site Scripting (XSS) - Stored in dolibarr/dolibarrCVE-2023-5842Fix available4.8 Medium
- dolibarr, dolibarr dolibarr/dolibarr, erp\/crm +2 moreCross-site Scripting (XSS) - Generic in dolibarr/dolibarrCVE-2023-5323Fix available5.4 Medium
- dolibarr erp\/crmCross Site Scripting vulnerability in Dolibarr ERP CRMCVE-2023-38888Fix available9.6 Critical
- dolibarr erp\/crmFile Upload vulnerability in Dolibarr ERP CRMCVE-2023-38887Fix available8.8 High
- dolibarr erp\/crmDolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/scriptCVE-2023-38886Fix availableEPSS 29.6%7.2 High
- dolibarr erp\/crmDolibarr vulnerable to unauthenticated database accessCVE-2023-33568Fix availableEPSS 14.9%7.5 High
- dolibarr erp\/crmDolibarr vulnerable to remote code execution via uppercase manipulationCVE-2023-30253Public exploitFix availableEPSS 82.1%8.8 High
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreSQL Injection in dolibarr/dolibarrCVE-2022-4093Fix available8.1 High
- dolibarr erp\/crmDolibarr vulnerable to privilege escalationCVE-2022-43138Fix available9.8 Critical
- dolibarr erp\/crmDolibarr vulnerable to Eval InjectionCVE-2022-40871EPSS 34.6%9.8 Critical
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreCross-site Scripting (XSS) - Stored in dolibarr/dolibarrCVE-2022-2060Fix available8.4 High
- dolibarr erp\/crmCross-site Scripting in DolibarrCVE-2022-308756.1 Medium
- dolibarr erp\/crmAccess Control vulnerability in DolibarrCVE-2021-37517Fix available7.5 High
- dolibarr erp\/crmSQL Injection in DolibarrCVE-2021-36625Fix available8.8 High
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreCode Injection in dolibarr/dolibarrCVE-2022-0819Fix availableEPSS 42.7%7.2 High
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreBusiness Logic Errors in dolibarr/dolibarrCVE-2022-0746Fix available4.3 Medium
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreImproper Access Control (IDOR) in dolibarr/dolibarrCVE-2022-0731Fix available5.4 Medium
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreImproper Validation of Specified Quantity in Input in dolibarr/dolibarrCVE-2022-0414Fix available4.1 Medium
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreSQL Injection in dolibarr/dolibarrCVE-2022-0224Fix available8.3 High
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreImproper Validation of Specified Quantity in Input in dolibarr/dolibarrCVE-2022-0174Fix available4.3 Medium
- dolibarr erp\/crmCross site scripting in dolibarrCVE-2022-22293Fix available5.4 Medium
- dolibarrDolibarr Cross Site Scripting (XSS) vulnerabilityCVE-2021-42220Fix available5.4 Medium
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS VulnerabilityCVE-2021-33618EPSS 79.3%6.1 Medium
- dolibarr erp\/crmDolibarr remote PHP code executionCVE-2021-33816Fix available9.8 Critical
- dolibarr, dolibarr erp\/crm +1 moreImproper User Access Control in "Dolibarr" Leads to Account TakeoverCVE-2021-25956Fix available4.7 Medium
- dolibarrAccount Takeover in "Dolibarr" via Password Reset FunctionalityCVE-2021-25957Fix available8.8 High
- dolibarrStored XSS in “Dolibarr” leads to privilege escalationCVE-2021-25955Fix available9.0 Critical
- dolibarrImproper Access Control in “Dolibarr”CVE-2021-25954Fix available4.3 Medium
- dolibarr erp\/crmDolibarr authenticated Remote Code ExecutionCVE-2020-35136Fix available7.2 High
- dolibarrDolibarr Unrestricted Upload of File with Dangerous TypeCVE-2020-14209Public exploitFix availableEPSS 27.5%8.8 High
- dolibarr erp\/crmDolibarr stored Cross-Site Scripting (XSS) vulnerabilityCVE-2020-138285.4 Medium
- dolibarrDolibarr CRM allows Privilege EscalationCVE-2020-14201Fix available6.5 Medium
- dolibarr erp\/crmDolibarr reflected cross-site scripting (XSS) vulnerabilityCVE-2020-14475Fix available6.1 Medium
- dolibarrDolibarr SQL injection vulnerability in accountancy/customer/card.phpCVE-2020-14443Fix available8.8 High
- dolibarr erp\/crmDolibarr Stored Cross-site Scripting via file uploadCVE-2020-132395.4 Medium
- dolibarr erp\/crmDolibarr Stored Cross-site ScriptingCVE-2020-132405.4 Medium
- dolibarrXSS in DolibarrCVE-2020-13094Public exploitFix available5.4 Medium
- dolibarrIncorrect Authorization in DolibarrCVE-2020-12669Fix available8.8 High
- dolibarr erp\/crmDolibarr Cross-Site Request Forgery VulnerabilityCVE-2020-118258.8 High
- dolibarr erp\/crmDolibarr stored Cross-site Scripting vulnerabilityCVE-2020-118235.4 Medium
- Show moreLoading…