Odoo Community
Approved changes feed: RSS · Atom
cpe:2.3:a:odoo:odoo_community:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Odoo (94abe8c4-9dae-5078-8611-2f86bea86151) |
|---|---|
| Product | Odoo Community (246ca565-8aff-5bf7-9e9b-e79ea9c3dd57) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-36259 |
vulnerable | 2026-06-08 06:39:44.044129 |
Details available
HIGH (7.5)
Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an oracle-based (yes/no response) crafted attack.
Published: 2025-02-25T19:10:40.570Z
Updated: 2025-02-25T19:39:18.179Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12368 |
vulnerable | 2026-06-08 06:23:51.791632 |
Details available
HIGH (8.1)
Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.
Published: 2025-02-25T18:10:12.109Z
Updated: 2025-02-25T18:59:46.305Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45111 |
vulnerable | 2026-06-08 05:36:47.981994 |
Details available
HIGH (7.1)
Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstration data, including user accounts with known credentials.
Published: 2023-04-25T18:33:00.392Z
Updated: 2024-08-04T04:39:20.253Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45071 |
vulnerable | 2026-06-08 05:36:47.763857 |
Details available
MEDIUM (5.3)
Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via crafted uploaded file names.
Published: 2023-04-25T18:29:52.108Z
Updated: 2024-08-04T04:32:13.508Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44775 |
vulnerable | 2026-06-08 05:36:47.486656 |
Details available
MEDIUM (6.5)
Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.
Published: 2023-04-25T18:33:38.887Z
Updated: 2024-08-04T04:32:13.292Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44547 |
vulnerable | 2026-06-08 05:36:46.311669 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44476 |
vulnerable | 2026-06-08 05:36:45.823826 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44465 |
vulnerable | 2026-06-08 05:36:45.811503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44460 |
vulnerable | 2026-06-08 05:36:45.798571 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26947 |
vulnerable | 2026-06-08 05:30:45.605514 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26263 |
vulnerable | 2026-06-08 05:30:42.123087 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23203 |
vulnerable | 2026-06-08 05:30:02.433095 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23186 |
vulnerable | 2026-06-08 05:30:02.380548 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23178 |
vulnerable | 2026-06-08 05:30:02.366933 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23176 |
vulnerable | 2026-06-08 05:30:02.356959 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23166 |
vulnerable | 2026-06-08 05:30:02.318239 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-29396 |
vulnerable | 2026-06-08 05:24:58.212239 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11786 |
vulnerable | 2026-06-08 05:12:38.112672 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11785 |
vulnerable | 2026-06-08 05:12:38.112187 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11784 |
vulnerable | 2026-06-08 05:12:38.111819 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11783 |
vulnerable | 2026-06-08 05:12:38.111437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11782 |
vulnerable | 2026-06-08 05:12:38.111009 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11781 |
vulnerable | 2026-06-08 05:12:38.108381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11780 |
vulnerable | 2026-06-08 05:12:38.105560 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15645 |
vulnerable | 2026-06-08 05:10:55.187393 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15641 |
vulnerable | 2026-06-08 05:10:55.186626 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15638 |
vulnerable | 2026-06-08 05:10:55.185797 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15635 |
vulnerable | 2026-06-08 05:10:55.185283 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15634 |
vulnerable | 2026-06-08 05:10:55.184895 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15633 |
vulnerable | 2026-06-08 05:10:55.184379 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15632 |
vulnerable | 2026-06-08 05:10:55.183947 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15631 |
vulnerable | 2026-06-08 05:10:55.182714 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.