Approved changes feed: RSS · Atom

cpe:2.3:a:odoo:odoo:17.0:*:*:*:enterprise:*:*:*

part: a version: 17.0 update: *

VendorOdoo (94abe8c4-9dae-5078-8611-2f86bea86151)
ProductOdoo (aa1140ca-e1f6-5d00-8bdd-8699a572b449)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/jelitox/odoo purl2cpe 2026-06-01 10:18:09.581763
pkg:deb/debian/odoo purl2cpe 2026-06-01 10:18:09.581765
pkg:deb/ubuntu/odoo purl2cpe 2026-06-01 10:18:09.581766
pkg:docker/odoo purl2cpe 2026-06-01 10:18:09.581767
pkg:github/odoo/odoo purl2cpe 2026-06-01 10:18:09.581769
pkg:rpm/opensuse/odoo purl2cpe 2026-06-01 10:18:09.581770
pkg:rpm/opensuse/odoo-release purl2cpe 2026-06-01 10:18:09.581771

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36259 vulnerable 2026-06-08 06:39:44.047320 Details available
HIGH (7.5)
Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an oracle-based (yes/no response) crafted attack.
Published: 2025-02-25T19:10:40.570Z
Updated: 2025-02-25T19:39:18.179Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.