odoo

Latest CVEs · RSS

• CVE-2024-36259 2025-02-25 · CVSS 7.5
  Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information vi
• CVE-2024-12368 2025-02-25 · CVSS 8.1
  Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other use
• CVE-2021-23203 2023-04-25 · CVSS 7.5
  Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF
• CVE-2021-44547 2023-04-25 · CVSS 8.7
  A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading to privilege escalati
• CVE-2021-26947 2023-04-25 · CVSS 6.5
  Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in
• CVE-2021-26263 2023-04-25 · CVSS 7.5
  Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject ar
• CVE-2021-44465 2023-04-25 · CVSS 5.3
  Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future no
• CVE-2021-44775 2023-04-25 · CVSS 6.5
  Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbit
• CVE-2021-23178 2023-04-25 · CVSS 7.5
  Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payments with a tokenized pa
• CVE-2021-23186 2023-04-25 · CVSS 8.7
  A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and modify database con
• CVE-2021-23166 2023-04-25 · CVSS 8.7
  A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and write local files on
• CVE-2021-44461 2023-04-25 · CVSS 6.5
  Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of account
• CVE-2021-44460 2023-04-25 · CVSS 7.4
  Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to access the system with
• CVE-2021-44476 2023-04-25 · CVSS 6.8
  A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server
• CVE-2021-45111 2023-04-25 · CVSS 7.1
  Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of dem
• CVE-2021-23176 2023-04-25 · CVSS 6.5
  Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenti
• CVE-2021-45071 2023-04-25 · CVSS 5.3
  Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in
• CVE-2020-29396 2020-12-22 · CVSS 9.9
  A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows remote authenticated
• CVE-2019-11785 2020-12-22 · CVSS 6.5
  Improper access control in mail module (followers) in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to
• CVE-2019-11786 2020-12-22 · CVSS 4.3
  Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to modify translated terms, w
• CVE-2019-11784 2020-12-22 · CVSS 6.5
  Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated user
• CVE-2019-11782 2020-12-22 · CVSS 6.5
  Improper access control in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users with access to contact manage
• CVE-2019-11783 2020-12-22 · CVSS 6.5
  Improper access control in mail module (channel partners) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated u
• CVE-2018-15645 2020-12-22 · CVSS 8.1
  Improper access control in message routing in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier allows remote authenticated users to create a
• CVE-2019-11781 2020-12-22 · CVSS 6.5
  Improper input validation in portal component in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier, allows remote attackers to trick victims