Approved changes feed: RSS · Atom

cpe:2.3:a:odoo:odoo:17.0:*:*:*:community:*:*:*

part: a version: 17.0 update: *

VendorOdoo (94abe8c4-9dae-5078-8611-2f86bea86151)
ProductOdoo (aa1140ca-e1f6-5d00-8bdd-8699a572b449)
Edition*
Language*
Software editioncommunity
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/jelitox/odoo purl2cpe 2026-06-01 10:18:09.581754
pkg:deb/debian/odoo purl2cpe 2026-06-01 10:18:09.581755
pkg:deb/ubuntu/odoo purl2cpe 2026-06-01 10:18:09.581757
pkg:docker/odoo purl2cpe 2026-06-01 10:18:09.581758
pkg:github/odoo/odoo purl2cpe 2026-06-01 10:18:09.581759
pkg:rpm/opensuse/odoo purl2cpe 2026-06-01 10:18:09.581761
pkg:rpm/opensuse/odoo-release purl2cpe 2026-06-01 10:18:09.581762

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36259 vulnerable 2026-06-08 06:39:44.046307 Details available
HIGH (7.5)
Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an oracle-based (yes/no response) crafted attack.
Published: 2025-02-25T19:10:40.570Z
Updated: 2025-02-25T19:39:18.179Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.