Odoo 14.0 Enterprise Edition

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:odoo:odoo:14.0:*:*:*:enterprise:*:*:*

part: a version: 14.0 update: *

VendorOdoo (94abe8c4-9dae-5078-8611-2f86bea86151)
ProductOdoo (aa1140ca-e1f6-5d00-8bdd-8699a572b449)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/jelitox/odoo purl2cpe 2026-06-01 10:18:09.581726
pkg:deb/debian/odoo purl2cpe 2026-06-01 10:18:09.581727
pkg:deb/ubuntu/odoo purl2cpe 2026-06-01 10:18:09.581728
pkg:docker/odoo purl2cpe 2026-06-01 10:18:09.581730
pkg:github/odoo/odoo purl2cpe 2026-06-01 10:18:09.581731
pkg:rpm/opensuse/odoo purl2cpe 2026-06-01 10:18:09.581733
pkg:rpm/opensuse/odoo-release purl2cpe 2026-06-01 10:18:09.581734

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-26263 vulnerable 2026-06-08 05:30:42.124880 Details available
HIGH (7.5)
Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.
Published: 2023-04-25T18:33:40.613Z
Updated: 2024-08-03T20:19:20.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23203 vulnerable 2026-06-08 05:30:02.434849 Details available
HIGH (7.5)
Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via crafted requests.
Published: 2023-04-25T18:35:38.489Z
Updated: 2025-02-03T17:14:04.331Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.