Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-23176

Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to extract accounting information via crafted RPC packets.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.2%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2021-23176
  • Odoo » Odoo » Version: 10.0
    cpe:2.3:a:odoo:odoo:10.0
  • Odoo » Odoo » Version: 11.0
    cpe:2.3:a:odoo:odoo:11.0
  • Odoo » Odoo » Version: 12.0
    cpe:2.3:a:odoo:odoo:12.0
  • Odoo » Odoo » Version: 13.0
    cpe:2.3:a:odoo:odoo:13.0
  • Odoo » Odoo » Version: 14.0
    cpe:2.3:a:odoo:odoo:14.0
  • Odoo » Odoo » Version: 15.0
    cpe:2.3:a:odoo:odoo:15.0
  • Odoo » Odoo » Version: 8.0
    cpe:2.3:a:odoo:odoo:8.0
  • Odoo » Odoo » Version: 9.0
    cpe:2.3:a:odoo:odoo:9.0


Contact Us

Shodan ® - All rights reserved