Product by Dolibarr

    Dolibarr Erp\/crm

    113 known vulnerabilities in Dolibarr Erp\/crm (Dolibarr), 0 of them actively exploited (CISA KEV).

    Key figures

    113

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    25

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Dolibarr Erp\/crm (Dolibarr)
    HighCVE-2026-22666

    Dolibarr ERP/CRM < 23.0.2 Authenticated RCE via dol_eval_standard()

    		7.2
    CriticalCVE-2024-5315

    Multiple vulnerabilities in DOLIBARR's ERP CMS

    		9.1
    CriticalCVE-2022-40871

    Dolibarr ERP/CRM: security vulnerability

    		9.8
    HighCVE-2023-30253

    Dolibarr ERP/CRM: Remote Code Execution

    		8.8
    HighCVE-2023-4197

    Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE

    		7.5
    CriticalCVE-2013-2093

    Dolibarr: security vulnerability

    also in 1 other product

    		9.8
    HighCVE-2023-38886

    Dolibarr ERP/CRM: Code Execution

    		7.2
    CriticalCVE-2020-7995

    Dolibarr ERP/CRM: security vulnerability

    		9.8
    HighCVE-2023-33568

    Dolibarr ERP/CRM: security vulnerability

    		7.5
    HighCVE-2022-0819

    Code Injection in dolibarr/dolibarr

    also in 1 other product

    		7.2
    CriticalCVE-2018-25357

    Dolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.php

    		9.8
    CriticalCVE-2021-33816

    Dolibarr ERP/CRM: Code Execution

    		9.8
    MediumCVE-2021-33618

    Dolibarr ERP/CRM: Cross-Site Scripting (XSS)

    		6.1
    CriticalCVE-2022-4093

    SQL Injection in dolibarr/dolibarr

    also in 1 other product

    		8.1
    HighCVE-2020-35136

    Dolibarr ERP/CRM: Remote Code Execution

    		7.2
    CriticalCVE-2013-2091

    Dolibarr: SQL Injection

    also in 1 other product

    		9.8
    CriticalCVE-2018-13447

    Dolibarr ERP/CRM: SQL Injection

    		9.8
    CriticalCVE-2018-13448

    Dolibarr ERP/CRM: SQL Injection

    		9.8
    CriticalCVE-2018-13450

    Dolibarr ERP/CRM: SQL Injection

    		9.8
    CriticalCVE-2018-13449

    Dolibarr ERP/CRM: SQL Injection

    		9.8
    CriticalCVE-2017-17897

    Dolibarr ERP/CRM: SQL Injection

    		9.8
    CriticalCVE-2017-17900

    Dolibarr ERP/CRM: SQL Injection

    		9.8
    CriticalCVE-2017-17899

    Dolibarr ERP/CRM: SQL Injection

    		9.8
    HighCVE-2018-19998

    Dolibarr ERP/CRM: SQL Injection

    		8.8
    HighCVE-2019-1010054

    Dolibarr: Cross-Site Request Forgery (CSRF)

    		8.8

    All vulnerabilities in search

    News

    All products by Dolibarr