DE
Product
Dolibarr ERP/CRM
112
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 25High 32Medium 48Low 0
Watch
Add Dolibarr ERP/CRM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77923 | 4.3 | Aug 24 | Dolibarr 21.0.0 < 24.0.0 Authorization Bypass via clonetasks Mass Action Affected: 21.0.0 before 24.0.0 |
| CVE-2021-3991 | 4.3 | Nov 15 | Improper Authorization in dolibarr/dolibarr Affected: before 20.0.2 |
| CVE-2022-0746 | 4.3 | Feb 25 | Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0 Affected: before 16.0.0 |
| CVE-2022-0414 | 4.3 | Jan 31 | Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16.0 Affected: before 16.0.0 |
| CVE-2022-0174 | 4.3 | Jan 10 | Improper Validation of Specified Quantity in Input vulnerability in dolibarr dolibarr/dolibarr Affected: before 15.0.0 |
| CVE-2014-3992 | – | Jul 11 | Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) entity parameter in an update… Affected: 3.5.3 |
| CVE-2014-3991 | – | Jul 11 | Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) dol_use_jmobile, (2)… Affected: 3.5.3 |
| CVE-2012-1226 | – | Feb 21 | Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a Affected: 3.2.0 |
| CVE-2012-1225 | – | Feb 21 | Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) memberslist parameter… Affected: through 3.2.0; 2.5.0; 2.6.0; 2.6.1; 2.7.0; 2.7.1; +7 more |
| CVE-2011-4814 | – | Dec 14 | Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to… Affected: through 3.1.0; 2.5.0; 2.6.0; 2.6.1; 2.7.0; 2.7.1; +5 more |
| CVE-2011-4802 | – | Dec 14 | Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) sortfield, (2)… Affected: through 3.1.0; 2.5.0; 2.6.0; 2.6.1; 2.7.0; 2.7.1; +5 more |
| CVE-2011-4329 | – | Nov 28 | Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 3.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter in a setup… Affected: 3.1.0 |