Approved changes feed: RSS · Atom

cpe:2.3:a:odoo:odoo:*:*:*:*:community:*:*:*

part: a version: * update: *

VendorOdoo (94abe8c4-9dae-5078-8611-2f86bea86151)
ProductOdoo (aa1140ca-e1f6-5d00-8bdd-8699a572b449)
Edition*
Language*
Software editioncommunity
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-45111 vulnerable 2026-06-08 05:36:47.982067 Details available
HIGH (7.1)
Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstration data, including user accounts with known credentials.
Published: 2023-04-25T18:33:00.392Z
Updated: 2024-08-04T04:39:20.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45071 vulnerable 2026-06-08 05:36:47.764128 Details available
MEDIUM (5.3)
Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via crafted uploaded file names.
Published: 2023-04-25T18:29:52.108Z
Updated: 2024-08-04T04:32:13.508Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44775 vulnerable 2026-06-08 05:36:47.486810 Details available
MEDIUM (6.5)
Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.
Published: 2023-04-25T18:33:38.887Z
Updated: 2024-08-04T04:32:13.292Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44547 vulnerable 2026-06-08 05:36:46.311848 Details available
HIGH (8.7)
A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading to privilege escalation.
Published: 2023-04-25T18:33:42.884Z
Updated: 2024-08-04T04:25:16.862Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44476 vulnerable 2026-06-08 05:36:45.823889 Details available
MEDIUM (6.8)
A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration files.
Published: 2023-04-25T18:33:32.237Z
Updated: 2025-02-03T19:33:55.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44465 vulnerable 2026-06-08 05:36:45.811655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44460 vulnerable 2026-06-08 05:36:45.800618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26947 vulnerable 2026-06-08 05:30:45.607403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23186 vulnerable 2026-06-08 05:30:02.380616 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23178 vulnerable 2026-06-08 05:30:02.367004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23176 vulnerable 2026-06-08 05:30:02.357019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23166 vulnerable 2026-06-08 05:30:02.320617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29396 vulnerable 2026-06-08 05:24:58.214821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11786 vulnerable 2026-06-08 05:12:38.112821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11785 vulnerable 2026-06-08 05:12:38.112338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11784 vulnerable 2026-06-08 05:12:38.111871 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11783 vulnerable 2026-06-08 05:12:38.111490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11782 vulnerable 2026-06-08 05:12:38.111075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11781 vulnerable 2026-06-08 05:12:38.109778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15645 vulnerable 2026-06-08 05:10:55.187455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15641 vulnerable 2026-06-08 05:10:55.186681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15638 vulnerable 2026-06-08 05:10:55.185852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15635 vulnerable 2026-06-08 05:10:55.185341 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15634 vulnerable 2026-06-08 05:10:55.184950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15633 vulnerable 2026-06-08 05:10:55.184437 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15632 vulnerable 2026-06-08 05:10:55.184015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15631 vulnerable 2026-06-08 05:10:55.183517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14860 vulnerable 2026-06-08 05:10:53.607565 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.