GCVE - cpe:2.3:a:odoo:odoo:8.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:odoo:odoo:8.0:*:*:*:*:*:*:*

part: a version: 8.0 update: *

Vendor	Odoo (`94abe8c4-9dae-5078-8611-2f86bea86151`)
Product	Odoo (`aa1140ca-e1f6-5d00-8bdd-8699a572b449`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:bitbucket/jelitox/odoo`	purl2cpe	2026-06-01 10:18:09.581773
`pkg:deb/debian/odoo`	purl2cpe	2026-06-01 10:18:09.581774
`pkg:deb/ubuntu/odoo`	purl2cpe	2026-06-01 10:18:09.581775
`pkg:docker/odoo`	purl2cpe	2026-06-01 10:18:09.581777
`pkg:github/odoo/odoo`	purl2cpe	2026-06-01 10:18:09.581778
`pkg:rpm/opensuse/odoo`	purl2cpe	2026-06-01 10:18:09.581779
`pkg:rpm/opensuse/odoo-release`	purl2cpe	2026-06-01 10:18:09.581781

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-9416`	vulnerable	2026-06-08 05:10:09.857859	Details available Directory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service. Published: 2017-06-03T23:00:00.000Z Updated: 2024-08-05T17:02:44.433Z Open on db.gcve.eu Reference links https://github.com/odoo/odoo/issues/17394	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-5871`	vulnerable	2026-06-08 05:09:49.974738	Details available Odoo Version <= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection. The impact is: obtain sensitive information (remote). Published: 2019-05-22T19:33:41.000Z Updated: 2024-08-05T15:11:48.909Z Open on db.gcve.eu Reference links https://www.odoo.com https://sysdream.com/news/lab/2017-11-20-cve-2017-5871-odoo-url-redirection-to-distrusted-site-open-redirect/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-10805`	vulnerable	2026-06-08 05:08:36.316595	Details available In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the OAuth module allows remote authenticated users to hijack OAuth sessions of other users. Published: 2017-07-04T18:00:00.000Z Updated: 2024-08-05T17:50:11.855Z Open on db.gcve.eu Reference links https://github.com/odoo/odoo/issues/17921	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-10804`	vulnerable	2026-06-08 05:08:36.316201	Details available In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass authentication under certain circumstances because parameters containing 0x00 characters are truncated before reaching the database layer. This occurs because Psycopg 2.x before 2.6.3 is used. Published: 2017-07-04T18:00:00.000Z Updated: 2024-08-05T17:50:11.667Z Open on db.gcve.eu Reference links https://github.com/odoo/odoo/issues/17914 http://initd.org/psycopg/docs/news.html#what-s-new-in-psycopg-2-6-3 https://github.com/psycopg/psycopg2/issues/420	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-10803`	vulnerable	2026-06-08 05:08:36.313216	Details available In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the Database Anonymization module allows remote authenticated privileged users to execute arbitrary Python code, because unpickle is used. Published: 2017-07-04T18:00:00.000Z Updated: 2024-08-05T17:50:11.800Z Open on db.gcve.eu Reference links https://github.com/odoo/odoo/issues/17898	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.