Odoo 15.0 Community Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:odoo:odoo:15.0:*:*:*:community:*:*:*
part: a version: 15.0 update: *
| Vendor | Odoo (94abe8c4-9dae-5078-8611-2f86bea86151) |
|---|---|
| Product | Odoo (aa1140ca-e1f6-5d00-8bdd-8699a572b449) |
| Edition | * |
| Language | * |
| Software edition | community |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/jelitox/odoo |
purl2cpe | 2026-06-01 10:18:09.581735 |
pkg:deb/debian/odoo |
purl2cpe | 2026-06-01 10:18:09.581737 |
pkg:deb/ubuntu/odoo |
purl2cpe | 2026-06-01 10:18:09.581738 |
pkg:docker/odoo |
purl2cpe | 2026-06-01 10:18:09.581739 |
pkg:github/odoo/odoo |
purl2cpe | 2026-06-01 10:18:09.581741 |
pkg:rpm/opensuse/odoo |
purl2cpe | 2026-06-01 10:18:09.581742 |
pkg:rpm/opensuse/odoo-release |
purl2cpe | 2026-06-01 10:18:09.581743 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-12368 |
vulnerable | 2026-06-08 06:23:51.793512 |
Details available
HIGH (8.1)
Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.
Published: 2025-02-25T18:10:12.109Z
Updated: 2025-02-25T18:59:46.305Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26263 |
vulnerable | 2026-06-08 05:30:42.125440 |
Details available
HIGH (7.5)
Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.
Published: 2023-04-25T18:33:40.613Z
Updated: 2024-08-03T20:19:20.148Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23203 |
vulnerable | 2026-06-08 05:30:02.435772 |
Details available
HIGH (7.5)
Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via crafted requests.
Published: 2023-04-25T18:35:38.489Z
Updated: 2025-02-03T17:14:04.331Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.