Known vulnerabilities in dolibarr - page 3

Software: dolibarr
Software CPE: cpe:2.3:a:dolibarr_erp_and_crm:dolibarr:*:*:*:*:*:*:*:*
Total vulnerabilities: 81
Public exploits: 11
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting dolibarr dolibarr is affected by 81 known vulnerabilities: 21 high, 12 medium, 48 low Critical High Medium Low

Vulnerabilities (81)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU21433 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-11200
CWE-94 High
No
No
9.0.3 30.09.2019 SB2019072918
#VU21432 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-11201
CWE-94 High
No
No
9.0.3 30.09.2019 SB2019072918
#VU21430 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1010016
CWE-79 Low
No
No
6.0.5 30.09.2019 SB2019071508
#VU21428 - Cross-Site Request Forgery (CSRF)
CVE-2019-1010054
CWE-352 Low
No
No
7.0.1 30.09.2019 SB2019071814
#VU21427 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16197
CWE-79 Low
Available
No
10.0.2 30.09.2019 SB2019081532
#VU21426 - Cross-Site Request Forgery (CSRF)
CVE-2019-15062
CWE-352 Low
No
No
10.0.2 30.09.2019 SB2019081532
#VU21425 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-11199
CWE-79 Low
No
No
9.0.3 30.09.2019 SB2019072918
#VU21421 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16688
CWE-79 Low
No
No
10.0.0 30.09.2019 SB2019093005
#VU36251 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19992
CWE-79 Low
No
No
- 03.01.2019 SB2019010305
#VU36252 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19993
CWE-79 Low
No
No
- 03.01.2019 SB2019010305
#VU36253 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-19994
CWE-89 High
No
No
- 03.01.2019 SB2019010305
#VU36254 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19995
CWE-79 Low
No
No
- 03.01.2019 SB2019010305
#VU36255 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-19998
CWE-89 High
No
No
- 03.01.2019 SB2019010305
#VU36939 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-13447
CWE-89 High
No
No
- 08.07.2018 SB2018070801
#VU31295 - Command injection
CVE-2018-10092
CWE-77 High
No
No
7.0.2 22.05.2018 SB2018052226
#VU31296 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-10094
CWE-89 High
Available
No
7.0.2 22.05.2018 SB2018052226
#VU31297 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-10095
CWE-79 Low
No
No
7.0.2 22.05.2018 SB2018052226
#VU31298 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-9019
CWE-89 High
No
No
7.0.2 22.05.2018 SB2018052226
SB2021012052
#VU37553 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1000509
CWE-79 Low
No
No
- 10.02.2018 SB2018021008
#VU37729 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-17897
CWE-89 High
No
No
- 27.12.2017 SB2017122708


Showing elements 41 - 60 out of 81