Approved changes feed: RSS · Atom

cpe:2.3:a:odoo:odoo_enterprise:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOdoo (94abe8c4-9dae-5078-8611-2f86bea86151)
ProductOdoo Enterprise (fa095fea-f244-5027-848a-7c4f04c818e5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36259 vulnerable 2026-06-08 06:39:44.045422 Details available
HIGH (7.5)
Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an oracle-based (yes/no response) crafted attack.
Published: 2025-02-25T19:10:40.570Z
Updated: 2025-02-25T19:39:18.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12368 vulnerable 2026-06-08 06:23:51.792631 Details available
HIGH (8.1)
Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.
Published: 2025-02-25T18:10:12.109Z
Updated: 2025-02-25T18:59:46.305Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45111 vulnerable 2026-06-08 05:36:47.982041 Details available
HIGH (7.1)
Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstration data, including user accounts with known credentials.
Published: 2023-04-25T18:33:00.392Z
Updated: 2024-08-04T04:39:20.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45071 vulnerable 2026-06-08 05:36:47.763999 Details available
MEDIUM (5.3)
Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via crafted uploaded file names.
Published: 2023-04-25T18:29:52.108Z
Updated: 2024-08-04T04:32:13.508Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44775 vulnerable 2026-06-08 05:36:47.486782 Details available
MEDIUM (6.5)
Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.
Published: 2023-04-25T18:33:38.887Z
Updated: 2024-08-04T04:32:13.292Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44547 vulnerable 2026-06-08 05:36:46.311716 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44476 vulnerable 2026-06-08 05:36:45.823865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44465 vulnerable 2026-06-08 05:36:45.811633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44461 vulnerable 2026-06-08 05:36:45.802070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44460 vulnerable 2026-06-08 05:36:45.799648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26947 vulnerable 2026-06-08 05:30:45.605686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26263 vulnerable 2026-06-08 05:30:42.123695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23203 vulnerable 2026-06-08 05:30:02.433137 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23186 vulnerable 2026-06-08 05:30:02.380585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23178 vulnerable 2026-06-08 05:30:02.366973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23176 vulnerable 2026-06-08 05:30:02.356996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23166 vulnerable 2026-06-08 05:30:02.319447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29396 vulnerable 2026-06-08 05:24:58.213621 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11786 vulnerable 2026-06-08 05:12:38.112796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11785 vulnerable 2026-06-08 05:12:38.112215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11784 vulnerable 2026-06-08 05:12:38.111850 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11783 vulnerable 2026-06-08 05:12:38.111468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11782 vulnerable 2026-06-08 05:12:38.111050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11781 vulnerable 2026-06-08 05:12:38.108424 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11780 vulnerable 2026-06-08 05:12:38.106469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15645 vulnerable 2026-06-08 05:10:55.187431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15641 vulnerable 2026-06-08 05:10:55.186658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15640 vulnerable 2026-06-08 05:10:55.186231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15638 vulnerable 2026-06-08 05:10:55.185829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15635 vulnerable 2026-06-08 05:10:55.185316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15634 vulnerable 2026-06-08 05:10:55.184927 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15633 vulnerable 2026-06-08 05:10:55.184413 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15632 vulnerable 2026-06-08 05:10:55.183990 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15631 vulnerable 2026-06-08 05:10:55.183473 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.