Odoo vulnerabilities
34 published CVEs name Odoo among the affected products.
- Published CVEs
- 34
- Last 12 months
- 0
- Critical
- 1
- Known exploited
- 0
Critical 1High 17Medium 16Low 0Not scored 0
CVEs per yearBy the year they were published
- 20194
- 202013
- 202315
- 20252
Newest CVEs
- CVE-2024-36259
Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information…
Odoo · Odoo Community
High7.5 - CVE-2024-12368
Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other…
Odoo · Odoo Community
High8.1 - CVE-2021-23203
Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF…
Odoo · Odoo Community
High7.5 - CVE-2021-44547
A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading to privilege…
Odoo · Odoo Community
High8.7 - CVE-2021-26947
Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script…
Odoo · Odoo Community
Medium6.5 - CVE-2021-26263
Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject…
Odoo · Odoo Community
High7.5 - CVE-2021-44465
Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future…
Odoo · Odoo Community
Medium5.3 - CVE-2021-44775
Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject…
Odoo · Odoo Community
Medium6.5 - CVE-2021-23178
Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payments with a tokenized…
Odoo · Odoo Community
High7.5 - CVE-2021-23186
A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and modify database…
Odoo · Odoo Community
High8.7