Known vulnerabilities in dolibarr - page 4

Software: dolibarr
Software CPE: cpe:2.3:a:dolibarr_erp_and_crm:dolibarr:*:*:*:*:*:*:*:*
Total vulnerabilities: 81
Public exploits: 11
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting dolibarr dolibarr is affected by 81 known vulnerabilities: 21 high, 12 medium, 48 low Critical High Medium Low

Vulnerabilities (81)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU37723 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-17971
CWE-79 Low
No
No
- 29.12.2017 SB2017122708
#VU37724 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-17900
CWE-89 High
No
No
- 27.12.2017 SB2017122708
#VU37730 - Exposure of sensitive information to an unauthorized actor
CVE-2017-17898
CWE-200 Medium
No
No
- 27.12.2017 SB2017122708
#VU37731 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-17899
CWE-89 High
No
No
- 27.12.2017 SB2017122708
#VU38326 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-14238
CWE-89 High
No
No
- 11.09.2017 SB2017091110
#VU38327 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14239
CWE-79 Low
No
No
- 11.09.2017 SB2017091110
#VU38328 - Exposure of sensitive information to an unauthorized actor
CVE-2017-14240
CWE-200 Medium
No
No
- 11.09.2017 SB2017091110
#VU38329 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14241
CWE-79 Low
No
No
- 11.09.2017 SB2017091110
#VU38330 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-14242
CWE-89 High
No
No
- 11.09.2017 SB2017091110
#VU39058 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-7886
CWE-89 High
No
No
- 10.05.2017 SB2017051026
#VU39059 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-7887
CWE-79 Low
No
No
- 10.05.2017 SB2017051026
#VU39060 - Inadequate Encryption Strength
CVE-2017-7888
CWE-326 High
No
No
- 10.05.2017 SB2017051026
#VU39061 - Improper Authentication
CVE-2017-8879
CWE-287 Medium
No
No
- 10.05.2017 SB2017051026
#VU40721 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-3935
CWE-79 Low
No
No
- 10.06.2015 SB2015061007
#VU41483 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-3991
CWE-79 Low
Available
No
- 11.07.2014 SB2014071102
#VU41484 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-3992
CWE-89 Low
Available
No
- 11.07.2014 SB2014071102
#VU44251 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2012-1225
CWE-89 Medium
Available
No
- 21.02.2012 SB2012022102
#VU44252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2012-1226
CWE-22 Medium
Available
No
- 21.02.2012 SB2012022103
#VU44449 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-4814
CWE-79 Low
Available
No
- 14.12.2011 SB2011121401
#VU44450 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2011-4802
CWE-89 Low
Available
No
- 14.12.2011 SB2011121401


Showing elements 61 - 80 out of 81