axelor

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

axelor records in CISA KEV

No axelor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Open Suite 1 record LOW

Records

2 records

TI-2026-45035 CVE-2026-63085 · GHSA-fgwg-8qwr-qvw3

Axelor Open Platform 8.x < 8.2.2 Authorization Bypass via Nested Relational Record Persistence

HIGH 73

Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that allows authenticated non-admin users to escalate privileges by exploiting unenforced field restrictions on nested relat…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00537 Published 2026-07-16 Fixed in 8.2.2 CWE-863

TI-2022-08857 CVE-2022-25138 · GHSA-pch7-p8hv-4m7w

Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting (XSS)…

LOW 25

Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Name parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00602 Published 2022-03-03 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0