Vulnerabilities

TI-2026-45035 CVE-2026-63085 · GHSA-fgwg-8qwr-qvw3

Axelor Open Platform 8.x < 8.2.2 Authorization Bypass via Nested Relational Record Persistence

HIGH 73

Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that allows authenticated non-admin users to escalate privileges by exploiting unenforced field restrictions on nested relat…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00537 Published 2026-07-16 Fixed in 8.2.2 CWE-863

TI-2022-08857 CVE-2022-25138 · GHSA-pch7-p8hv-4m7w

Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting (XSS)…

LOW 25

Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Name parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00602 Published 2022-03-03 No fix listed CWE-79

Vulnerabilities

Filters

Axelor Open Platform 8.x < 8.2.2 Authorization Bypass via Nested Relational Record Persistence

Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting (XSS)…