Odoo 14.0 Community Edition

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:odoo:odoo:14.0:*:*:*:community:*:*:*

part: a version: 14.0 update: *

VendorOdoo (94abe8c4-9dae-5078-8611-2f86bea86151)
ProductOdoo (aa1140ca-e1f6-5d00-8bdd-8699a572b449)
Edition*
Language*
Software editioncommunity
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/jelitox/odoo purl2cpe 2026-06-01 10:18:09.581716
pkg:deb/debian/odoo purl2cpe 2026-06-01 10:18:09.581718
pkg:deb/ubuntu/odoo purl2cpe 2026-06-01 10:18:09.581719
pkg:docker/odoo purl2cpe 2026-06-01 10:18:09.581720
pkg:github/odoo/odoo purl2cpe 2026-06-01 10:18:09.581722
pkg:rpm/opensuse/odoo purl2cpe 2026-06-01 10:18:09.581723
pkg:rpm/opensuse/odoo-release purl2cpe 2026-06-01 10:18:09.581724

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-26263 vulnerable 2026-06-08 05:30:42.124316 Details available
HIGH (7.5)
Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.
Published: 2023-04-25T18:33:40.613Z
Updated: 2024-08-03T20:19:20.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23203 vulnerable 2026-06-08 05:30:02.434296 Details available
HIGH (7.5)
Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via crafted requests.
Published: 2023-04-25T18:35:38.489Z
Updated: 2025-02-03T17:14:04.331Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.