İçeriğe atla
Noroxi

Odoo kayıtları

odoo üreticisine ait 56 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%28,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 20
  4. 23
  5. 24
  6. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

56 kayıt
  • CVE-2017-10804
    40Planlayın

    In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass authentication under

    KritikCVSS 9,8İstismar yokEPSS %3

    odoo · odoo4 Tem 2017

  • CVE-2018-14885
    40Planlayın

    Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote

    KritikCVSS 9,8İstismar yokEPSS %2

    odoo · odoo28 Haz 2019

  • CVE-2023-48050
    39İzleyin

    SQL injection vulnerability in Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance (aka odoo-biometric-atten

    KritikCVSS 9,8İstismar yokEPSS %1

    odoo · biometric attendance14 Ara 2023

  • CVE-2018-15640
    37İzleyin

    Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated pr

    YüksekCVSS 8,8İstismar yokEPSS %8

    odoo · odoo9 Nis 2019

  • CVE-2018-14860
    37İzleyin

    Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticat

    KritikCVSS 9,1İstismar yokEPSS %2

    odoo · odoo3 Tem 2019

  • CVE-2020-29396
    36İzleyin

    A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows

    YüksekCVSS 8,8İstismar yokEPSS %3

    odoo · odoo22 Ara 2020

  • CVE-2019-11781
    36İzleyin

    Improper input validation in portal component in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier, allows remote attacke

    YüksekCVSS 8,8İstismar yokEPSS %2

    odoo · odoo22 Ara 2020

  • CVE-2018-15632
    36İzleyin

    Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote

    KritikCVSS 9,1İstismar yokEPSS %1

    odoo · odoo22 Ara 2020

  • CVE-2021-44547
    36İzleyin

    A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading t

    KritikCVSS 9,1İstismar yokEPSS %1

    odoo · odoo25 Nis 2023

  • CVE-2017-10805
    35İzleyin

    In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the

    YüksekCVSS 8,8İstismar yokEPSS %1

    odoo · odoo4 Tem 2017

  • CVE-2024-12368
    35İzleyin

    Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth

    YüksekCVSS 8,8İstismar yokEPSS %1

    odoo · odoo25 Şub 2025

  • CVE-2021-23166
    34İzleyin

    A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and w

    YüksekCVSS 8,7İstismar yokEPSS %1

    odoo · odoo25 Nis 2023

  • CVE-2021-23186
    34İzleyin

    A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and

    YüksekCVSS 8,7İstismar yokEPSS %1

    odoo · odoo25 Nis 2023

  • CVE-2019-11780
    33İzleyin

    Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authent

    YüksekCVSS 8,1İstismar yokEPSS %2

    odoo · odoo19 Ara 2019

  • CVE-2018-14859
    32İzleyin

    Incorrect access control in the password reset component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows auth

    YüksekCVSS 8,1İstismar yokEPSS %1

    odoo · odoo3 Tem 2019

  • CVE-2018-14863
    32İzleyin

    Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated u

    YüksekCVSS 8,1İstismar yokEPSS %1

    odoo · odoo3 Tem 2019

  • CVE-2021-45111
    32İzleyin

    Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger

    YüksekCVSS 8,1İstismar yokEPSS %1

    odoo · odoo25 Nis 2023

  • CVE-2018-14733
    31İzleyin

    The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression

    YüksekCVSS 7,5İstismar yokEPSS %2

    odoo · odoo5 Tem 2019

  • CVE-2021-23203
    30İzleyin

    Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attack

    YüksekCVSS 7,5İstismar yokEPSS %1

    odoo · odoo25 Nis 2023

  • CVE-2021-23178
    30İzleyin

    Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payments

    YüksekCVSS 7,5İstismar yokEPSS %1

    odoo · odoo25 Nis 2023

  • CVE-2024-34533
    29İzleyin

    A SQL injection vulnerability in ZI PT Solusi Usaha Mudah Analytic Data Query module (aka izi_data) 11.0 through 17.x before 17.0.3 allows a

    YüksekCVSS 7,3İstismar yokEPSS %1

    6 May 2024

  • CVE-2024-34534
    29İzleyin

    A SQL injection vulnerability in Cybrosys Techno Solutions Text Commander module (aka text_commander) 16.0 through 16.0.1 allows a remote at

    YüksekCVSS 7,3İstismar yokEPSS %0

    6 May 2024

  • CVE-2017-9416
    28İzleyin

    Directory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local fi

    OrtaCVSS 6,5Kavram kanıtıEPSS %6

    odoo · odoo4 Haz 2017

  • CVE-2017-10803
    27İzleyin

    In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the D

    OrtaCVSS 6,5Kavram kanıtıEPSS %4

    odoo · odoo4 Tem 2017

  • CVE-2018-14887
    27İzleyin

    Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier

    OrtaCVSS 6,5İstismar yokEPSS %2

    odoo · odoo28 Haz 2019