Approved changes feed: RSS · Atom

cpe:2.3:a:dolibarr:dolibarr/dolibarr:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDolibarr (63aa6448-b9f1-5072-badf-d5da7e178b3f)
ProductDolibarr/Dolibarr (bad67aef-7737-5769-8c3e-920b81007702)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5842 vulnerable 2026-06-08 06:19:44.884276 Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr
MEDIUM (4.8)
Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5.
Published: 2023-10-30T00:00:21.048Z
Updated: 2024-09-06T18:11:31.816Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5323 vulnerable 2026-06-08 06:19:43.199459 Cross-site Scripting (XSS) - Generic in dolibarr/dolibarr
MEDIUM (5.4)
Cross-site Scripting (XSS) - Generic in GitHub repository dolibarr/dolibarr prior to 18.0.
Published: 2023-10-01T00:00:19.423Z
Updated: 2024-09-20T15:23:09.982Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4093 vulnerable 2026-06-08 05:51:36.708576 SQL Injection in dolibarr/dolibarr
HIGH (8.1)
SQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or personal user information. Many high-profile data breaches in recent years have been the result of SQL injection attacks, leading to reputational damage and regulatory fines. In some cases, an attacker can obtain a persistent backdoor into an organization's systems, leading to a long-term compromise that can go unnoticed for an extended period. This affect 16.0.1 and 16.0.2 only. 16.0.0 or lower, and 16.0.3 or higher are not affected
Published: 2022-11-21T00:00:00.000Z
Updated: 2025-04-14T18:16:35.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2060 vulnerable 2026-06-08 05:42:50.175545 Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr
HIGH (8.4)
Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.
Published: 2022-06-13T08:50:10.000Z
Updated: 2024-08-03T00:24:44.238Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0819 vulnerable 2026-06-08 05:39:11.250431 Code Injection in dolibarr/dolibarr
HIGH (7.2)
Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1.
Published: 2022-03-02T15:40:13.000Z
Updated: 2024-08-02T23:40:04.410Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0746 vulnerable 2026-06-08 05:39:10.752874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0731 vulnerable 2026-06-08 05:39:10.670528 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0414 vulnerable 2026-06-08 05:39:09.997503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0224 vulnerable 2026-06-08 05:39:09.562700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0174 vulnerable 2026-06-08 05:39:09.399283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3991 vulnerable 2026-06-08 05:35:16.532169 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.