Approved changes feed: RSS · Atom

cpe:2.3:a:odoo:odoo:15.0:*:*:*:enterprise:*:*:*

part: a version: 15.0 update: *

VendorOdoo (94abe8c4-9dae-5078-8611-2f86bea86151)
ProductOdoo (aa1140ca-e1f6-5d00-8bdd-8699a572b449)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/jelitox/odoo purl2cpe 2026-06-01 10:18:09.581745
pkg:deb/debian/odoo purl2cpe 2026-06-01 10:18:09.581746
pkg:deb/ubuntu/odoo purl2cpe 2026-06-01 10:18:09.581747
pkg:docker/odoo purl2cpe 2026-06-01 10:18:09.581749
pkg:github/odoo/odoo purl2cpe 2026-06-01 10:18:09.581750
pkg:rpm/opensuse/odoo purl2cpe 2026-06-01 10:18:09.581751
pkg:rpm/opensuse/odoo-release purl2cpe 2026-06-01 10:18:09.581753

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12368 vulnerable 2026-06-08 06:23:51.794285 Details available
HIGH (8.1)
Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.
Published: 2025-02-25T18:10:12.109Z
Updated: 2025-02-25T18:59:46.305Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26263 vulnerable 2026-06-08 05:30:42.126022 Details available
HIGH (7.5)
Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.
Published: 2023-04-25T18:33:40.613Z
Updated: 2024-08-03T20:19:20.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23203 vulnerable 2026-06-08 05:30:02.436387 Details available
HIGH (7.5)
Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via crafted requests.
Published: 2023-04-25T18:35:38.489Z
Updated: 2025-02-03T17:14:04.331Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.