Odoo vulnerabilities

Products

• Odoo 55
• Enterprise 34
• Community 32
• Community 3
• Enterprise 3

Newest

• odoo, odoo community, enterprise +2 more Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows... CVE-2024-36259 Fix available 7.5 HighFebruary 25, 2025
• odoo, odoo community, enterprise +2 more Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0... CVE-2024-12368 Fix available 8.1 HighFebruary 25, 2025
• odoo A SQL injection vulnerability in Cybrosys Techno Solutions Text Commander module (aka... CVE-2024-34534 7.3 HighMay 6, 2024
• odoo A SQL injection vulnerability in ZI PT Solusi Usaha Mudah Analytic Data Query module (aka... CVE-2024-34533 7.3 HighMay 6, 2024
• camsbiometrics zkteco\, essl\, cams biometrics integration module, odoo biometric attendance +1 more SQL injection vulnerability in Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module... CVE-2023-48050 9.8 CriticalDecember 15, 2023
• odoo, odoo community, enterprise +2 more Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo... CVE-2021-23203 Fix available 7.5 HighApril 25, 2023
• odoo, odoo community, enterprise +2 more A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated... CVE-2021-44547 Fix available 8.7 HighApril 25, 2023
• odoo, odoo community, enterprise +2 more Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and... CVE-2021-26947 Fix available 6.5 MediumApril 25, 2023
• odoo, odoo community, enterprise +2 more Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo... CVE-2021-26263 Fix available 7.5 HighApril 25, 2023
• odoo, odoo community, enterprise +2 more Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier... CVE-2021-44465 Fix available 5.3 MediumApril 25, 2023
• odoo, odoo community, enterprise +2 more Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo... CVE-2021-44775 Fix available 6.5 MediumApril 25, 2023
• odoo, odoo community, enterprise +2 more Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier... CVE-2021-23178 Fix available 7.5 HighApril 25, 2023
• odoo, odoo community, enterprise +2 more A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows... CVE-2021-23186 Fix available 8.7 HighApril 25, 2023
• odoo, odoo community, enterprise +2 more A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows... CVE-2021-23166 Fix available 8.7 HighApril 25, 2023
• odoo, odoo enterprise +1 more Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows... CVE-2021-44461 Fix available 6.5 MediumApril 25, 2023
• odoo, odoo community, enterprise +2 more Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier... CVE-2021-44460 Fix available 7.4 HighApril 25, 2023
• odoo, odoo community, enterprise +2 more A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows... CVE-2021-44476 Fix available 6.8 MediumApril 25, 2023
• odoo, odoo community, enterprise +2 more Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier... CVE-2021-45111 Fix available 7.1 HighApril 25, 2023
• odoo, odoo community, enterprise +2 more Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and... CVE-2021-23176 Fix available 6.5 MediumApril 25, 2023
• odoo, odoo community, enterprise +2 more Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and... CVE-2021-45071 Fix available 5.3 MediumApril 25, 2023
• odoo, odoo community, enterprise +2 more A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0,... CVE-2020-29396 Fix available 9.9 CriticalDecember 22, 2020
• odoo, odoo community, enterprise +2 more Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier,... CVE-2019-11786 4.3 MediumDecember 22, 2020
• odoo, odoo community, enterprise +2 more Improper access control in mail module (followers) in Odoo Community 13.0 and earlier and Odoo... CVE-2019-11785 6.5 MediumDecember 22, 2020
• odoo, odoo community, enterprise +2 more Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and... CVE-2019-11784 Fix available 6.5 MediumDecember 22, 2020
• odoo, odoo community, enterprise +2 more Improper access control in mail module (channel partners) in Odoo Community 14.0 and earlier and... CVE-2019-11783 Fix available 6.5 MediumDecember 22, 2020
• odoo, odoo community, enterprise +2 more Improper access control in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier,... CVE-2019-11782 Fix available 6.5 MediumDecember 22, 2020
• odoo, odoo community, enterprise +2 more Improper input validation in portal component in Odoo Community 12.0 and earlier and Odoo... CVE-2019-11781 6.5 MediumDecember 22, 2020
• odoo, odoo community, enterprise +2 more Improper access control in message routing in Odoo Community 12.0 and earlier and Odoo Enterprise... CVE-2018-15645 8.1 HighDecember 22, 2020
• odoo, odoo community, enterprise +2 more Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo... CVE-2018-15641 Fix available 6.3 MediumDecember 22, 2020
• odoo, odoo community, enterprise +2 more Cross-site scripting (XSS) issue in mail module in Odoo Community 13.0 and earlier and Odoo... CVE-2018-15638 7.1 HighDecember 22, 2020
• odoo, odoo community, enterprise +2 more Cross-site scripting (XSS) issue in attachment management in Odoo Community 14.0 and earlier and... CVE-2018-15634 Fix available 7.1 HighDecember 22, 2020
• odoo, odoo community, enterprise +2 more Cross-site scripting (XSS) issue in "document" module in Odoo Community 11.0 and earlier and Odoo... CVE-2018-15633 7.1 HighDecember 22, 2020
• odoo, odoo community, enterprise +2 more Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo... CVE-2018-15632 8.2 HighDecember 22, 2020
• odoo, odoo community, enterprise +2 more Improper access control in the computed fields system of the framework of Odoo Community 13.0 and... CVE-2019-11780 8.1 HighDecember 19, 2019
• odoo The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and... CVE-2018-14733 7.5 HighJuly 5, 2019
• odoo Incorrect access control in the password reset component in Odoo Community 11.0 and earlier and... CVE-2018-14859 8.1 HighJuly 3, 2019
• odoo Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo... CVE-2018-14860 9.1 CriticalJuly 3, 2019
• odoo Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0... CVE-2018-14861 6.5 MediumJuly 3, 2019
• odoo Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and... CVE-2018-14862 6.5 MediumJuly 3, 2019
• odoo Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo... CVE-2018-14863 8.1 HighJuly 3, 2019
• odoo Incorrect access control in asset bundles in Odoo Community 9.0 through 11.0 and earlier and Odoo... CVE-2018-14864 6.5 MediumJuly 3, 2019
• odoo Report engine in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0... CVE-2018-14865 6.5 MediumJuly 3, 2019
• odoo Incorrect access control in the TransientModel framework in Odoo Community 11.0 and earlier and... CVE-2018-14866 4.3 MediumJuly 3, 2019
• odoo Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo... CVE-2018-14867 5.3 MediumJune 28, 2019
• odoo Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo... CVE-2018-14868 6.5 MediumJune 28, 2019
• odoo Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and... CVE-2018-14885 9.8 CriticalJune 28, 2019
• odoo The module-description renderer in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and... CVE-2018-14886 4.9 MediumJune 28, 2019
• odoo Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and... CVE-2018-14887 6.5 MediumJune 28, 2019
• odoo Odoo Version <= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection. The impact... CVE-2017-5871 5.4 MediumMay 22, 2019
• odoo, odoo enterprise +1 more Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote... CVE-2018-15640 8.1 HighApril 9, 2019
• Show olderLoading…