Dolibarr 漏洞

时间轴

类型

Enterprise Resource Planning Software51

产品

Dolibarr ERP CRM25
Dolibarr CRM24
Dolibarr ERP22

修正

Official Fix26
Temporary Fix0
Workaround0
Unavailable0
Not Defined25

易受攻击性

High0
Functional0
Proof-of-Concept1
Unproven0
Not Defined50

访问向量

Not Defined0
Physical1
Local0
Adjacent3
Network47

身份验证

Not Defined0
High0
Low25
None26

用户交互

Not Defined0
Required17
None34

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤58
≤613
≤79
≤812
≤97
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤59
≤614
≤79
≤810
≤97
≤100

VulDB

≤10
≤20
≤30
≤48
≤512
≤610
≤713
≤88
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤66
≤712
≤83
≤98
≤1012

CNA

≤10
≤20
≤30
≤40
≤51
≤60
≤71
≤81
≤91
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k10
<2k34
<5k7
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k45
<2k6
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (3): CRM (24), ERP (22), ERP CRM (25)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2024-04-174.34.2Dolibarr ERP CRM 跨网站请求伪造Enterprise Resource Planning SoftwareNot DefinedNot Defined0.000430.00CVE-2024-31503
2024-04-035.55.5Dolibarr ERP CRM Privilege EscalationEnterprise Resource Planning SoftwareNot DefinedNot Defined0.000430.00CVE-2024-29477
2023-11-015.95.9Dolibarr ERP CRM Database Table 权限升级Enterprise Resource Planning SoftwareNot DefinedOfficial Fix0.000490.03CVE-2023-4198
2023-11-017.17.1Dolibarr ERP CRM 权限升级Enterprise Resource Planning SoftwareNot DefinedOfficial Fix0.000680.00CVE-2023-4197
2023-09-206.76.7Dolibarr ERP CRM Command Privilege EscalationEnterprise Resource Planning SoftwareNot DefinedNot Defined0.001600.02CVE-2023-38886
2023-09-206.56.5Dolibarr ERP CRM REST API Module testSqlAndScriptject 跨网站脚本Enterprise Resource Planning SoftwareNot DefinedNot Defined0.001780.02CVE-2023-38888
2023-09-207.57.5Dolibarr ERP CRM 权限升级Enterprise Resource Planning SoftwareNot DefinedNot Defined0.000970.03CVE-2023-38887
2023-05-177.67.5Dolibarr ERP CRM login SQL注入Enterprise Resource Planning SoftwareNot DefinedNot Defined0.000890.02CVE-2023-27742
2022-10-126.36.1Dolibarr ERP/CRM Installation Page 权限升级Enterprise Resource Planning SoftwareNot DefinedNot Defined0.002520.00CVE-2022-40871
2022-04-013.53.4Dolibarr ERP/CRM Email Address 拒绝服务Enterprise Resource Planning SoftwareNot DefinedOfficial Fix0.000740.00CVE-2021-37517

41 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 41 results.

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!