Product by Dolibarr
Dolibarr/dolibarr
121 known vulnerabilities in Dolibarr/dolibarr (Dolibarr), 0 of them actively exploited (CISA KEV).
Key figures
121
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
29
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-5315 | Multiple vulnerabilities in DOLIBARR's ERP CMS | 9.1 | |
| Critical | CVE-2022-40871 | Dolibarr ERP/CRM: security vulnerability | 9.8 | |
| Critical | CVE-2018-10094 | Dolibarr: SQL Injection | 9.8 | |
| High | CVE-2023-30253 | Dolibarr ERP/CRM: Remote Code Execution | 8.8 | |
| High | CVE-2020-14209 | Dolibarr: Code Execution | 8.8 | |
| High | CVE-2023-4197 | Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE | 7.5 | |
| High | CVE-2023-38886 | Dolibarr ERP/CRM: Code Execution | 7.2 | |
| Critical | CVE-2020-7995 | Dolibarr ERP/CRM: security vulnerability | 9.8 | |
| High | CVE-2023-33568 | Dolibarr ERP/CRM: security vulnerability | 7.5 | |
| High | CVE-2022-0819 | Code Injection in dolibarr/dolibarr | 7.2 | |
| Critical | CVE-2021-33816 | Dolibarr ERP/CRM: Code Execution | 9.8 | |
| Critical | CVE-2019-19212 | Dolibarr: Cross-Site Scripting (XSS) | 9.8 | |
| Critical | CVE-2018-9019 | Dolibarr: SQL Injection | 9.8 | |
| Medium | CVE-2018-10095 | Dolibarr: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2021-33618 | Dolibarr ERP/CRM: Cross-Site Scripting (XSS) | 6.1 | |
| Critical | CVE-2022-4093 | SQL Injection in dolibarr/dolibarr | 8.1 | |
| High | CVE-2020-35136 | Dolibarr ERP/CRM: Remote Code Execution | 7.2 | |
| Critical | CVE-2018-16809 | Dolibarr: SQL Injection | 9.8 | |
| Critical | CVE-2018-13447 | Dolibarr ERP/CRM: SQL Injection | 9.8 | |
| Critical | CVE-2018-13448 | Dolibarr ERP/CRM: SQL Injection | 9.8 | |
| Critical | CVE-2018-13450 | Dolibarr ERP/CRM: SQL Injection | 9.8 | |
| Critical | CVE-2018-13449 | Dolibarr ERP/CRM: SQL Injection | 9.8 | |
| Critical | CVE-2017-17897 | Dolibarr ERP/CRM: SQL Injection | 9.8 | |
| Critical | CVE-2017-17900 | Dolibarr ERP/CRM: SQL Injection | 9.8 | |
| Critical | CVE-2017-17899 | Dolibarr ERP/CRM: SQL Injection | 9.8 |