Technology hubs

Odoo

Odoo CVE catalog plus a Community Git security-fix timeline and revision analyzer.

Explore Odoo vulnerabilities Security Fix Timeline Patch analyzer Monitor My Technology Stack

54 public records currently classified under this stack.

Recent Odoo findings

Medium4.3The Notify Odoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.CVE-2026-8425 · CVE.org · NIST NVD · Odoo, WordPressMay 15, 2026
Medium6.5Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an or…CVE-2024-36259 · odoo · odoo · CVE.org · FIRST EPSS · NIST NVD · OdooEPSS 0.7%Feb 25, 2025
High8.8Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.CVE-2024-12368 · odoo · odoo · CVE.org · FIRST EPSS · NIST NVD · OdooEPSS 0.7%Feb 25, 2025
High8.1Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstrat…CVE-2021-45111 · odoo · odoo · CVE.org · FIRST EPSS · NIST NVD · OdooEPSS 0.8%Apr 25, 2023
Medium6.1Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the br…CVE-2021-45071 · odoo · odoo · CVE.org · FIRST EPSS · NIST NVD · OdooEPSS 0.7%Apr 25, 2023
Medium6.1Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary we…CVE-2021-44775 · odoo · odoo · CVE.org · FIRST EPSS · NIST NVD · OdooEPSS 0.5%Apr 25, 2023
Critical9.1A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading to privilege escalation.CVE-2021-44547 · odoo · odoo · CVE.org · FIRST EPSS · NIST NVD · OdooEPSS 0.7%Apr 25, 2023
Medium6.8A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, inclu…CVE-2021-44476 · odoo · odoo · CVE.org · FIRST EPSS · NIST NVD · OdooEPSS 0.5%Apr 25, 2023
Medium4.3Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notificat…CVE-2021-44465 · odoo · odoo · CVE.org · FIRST EPSS · NIST NVD · OdooEPSS 0.5%Apr 25, 2023
Medium6.1Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting jou…CVE-2021-44461 · odoo · odoo · CVE.org · FIRST EPSS · NIST NVD · OdooEPSS 0.5%Apr 25, 2023