Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Odoo Community, Odoo Enterprise unspecified Clear all filters
TI-2020-17672 CVE-2020-29396 · GHSA-fg5r-c9qq-q3wm

A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through…

Priority MEDIUM 44

A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows remote authenticated users to execute arbitrary code, leading to privilege escal…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03132 Published 2020-12-22 No fix listed CWE-267
TI-2018-11150 CVE-2018-15641 · GHSA-j8r2-275f-f2p3

Cross-site scripting in Odoo Community

Priority LOW 26

Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo Enterprise 11.0 through 14.0, allows remote authenticated internal users to inject arbitrary web script in the browser of a vict…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0071 Published 2020-12-22 No fix listed CWE-79