Known vulnerabilities in dolibarr - page 2

Software: dolibarr
Software CPE: cpe:2.3:a:dolibarr_erp_and_crm:dolibarr:*:*:*:*:*:*:*:*
Total vulnerabilities: 81
Public exploits: 11
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting dolibarr dolibarr is affected by 81 known vulnerabilities: 21 high, 12 medium, 48 low Critical High Medium Low

Vulnerabilities (81)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27247 - Cross-Site Request Forgery (CSRF)
CVE-2020-11825
CWE-352 Low
No
No
10.0.7 23.04.2020 SB2020012815
#VU27246 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11823
CWE-79 Low
No
No
- 23.04.2020 SB2020012815
#VU25401 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9016
CWE-79 Low
No
No
11.0.1 17.02.2020 SB2020021712
#VU24709 - Improper Control of Interaction Frequency
CVE-2020-7995
CWE-799 Medium
Available
No
10.0.7 28.01.2020 SB2020012815
#VU24708 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7994
CWE-79 Low
No
No
10.0.7 28.01.2020 SB2020012815
#VU24707 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7996
CWE-79 Low
No
No
10.0.7 28.01.2020 SB2020012815
#VU23049 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Low
No
No
11.0.0 27.11.2019 SB2019112718
#VU23048 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Low
No
No
11.0.0 27.11.2019 SB2019112718
#VU23047 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Medium
No
No
10.0.3 27.11.2019 SB2019102319
#VU23046 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17576
CWE-79 Low
No
No
10.0.3 27.11.2019 SB2019102319
#VU23045 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17577
CWE-79 Low
No
No
10.0.3 27.11.2019 SB2019102319
#VU23044 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17578
CWE-79 Low
No
No
10.0.3 27.11.2019 SB2019102319
#VU35029 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-19206
CWE-79 Low
No
No
- 26.11.2019 SB2019112636
#VU35050 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-2092
CWE-79 Low
No
No
- 20.11.2019 SB2019112039
#VU35051 - Improper input validation
CVE-2013-2093
CWE-20 High
No
No
- 20.11.2019 SB2019112039
#VU35052 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2013-2091
CWE-89 High
No
No
- 20.11.2019 SB2019112039
#VU21883 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17223
CWE-79 Low
No
No
10.0.3 16.10.2019 SB2019101607
#VU21424 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16685
CWE-79 Low
No
No
10.0.0 30.09.2019 SB2019093005
#VU21423 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16686
CWE-79 Low
No
No
10.0.0 30.09.2019 SB2019093005
#VU21422 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16687
CWE-79 Low
No
No
10.0.0 30.09.2019 SB2019093005


Showing elements 21 - 40 out of 81