CVE security advisories and vulnerability history for dolibarr erp/crm by Dolibarr.
111
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
34
Public exploits
PoC or exploit code
7.2
Avg CVSS
2011–2026
Last updated
Overview
dolibarr erp/crm has 111 published CVE records since 2011, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 34 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.
This page aggregates every publicly disclosed vulnerability (CVE) affecting dolibarr erp/crm, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of dolibarr erp/crm's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical22
High38
Medium49
Low2
In CISA’s Known Exploited Vulnerabilities catalog
0
None of dolibarr erp/crm's CVEs are currently listed in CISA's KEV catalog.
Public exploits
34
34 of dolibarr erp/crm's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every dolibarr erp/crm version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
6.0.4 <= v <= 6.0.46 CVEs
10.0.6 <= v <= 10.0.65 CVEs
8.0.2 <= v <= 8.0.25 CVEs
9.0.1 <= v <= 9.0.15 CVEs
< 16.0.04 CVEs
10.0.2 <= v <= 10.0.24 CVEs
13.0.2 <= v <= 13.0.24 CVEs
4.0.4 <= v <= 4.0.44 CVEs
7.0.3 <= v <= 7.0.34 CVEs
9.0.5 <= v <= 9.0.54 CVEs
<= 17.0.13 CVEs
Common weakness types
The CWE weakness categories most often found in dolibarr erp/crm CVEs. Follow any weakness for its full explanation.
Common questions about dolibarr erp/crm vulnerabilities.
How many CVEs does Dolibarr dolibarr erp/crm have?
Dolibarr dolibarr erp/crm has 111 published CVE records since 2011.
How many Dolibarr dolibarr erp/crm CVEs are in CISA KEV?
None of Dolibarr dolibarr erp/crm's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Dolibarr dolibarr erp/crm vulnerabilities?
Yes — 34 of Dolibarr dolibarr erp/crm's CVEs have a known public exploit.
Which versions of Dolibarr dolibarr erp/crm are affected?
86 distinct Dolibarr dolibarr erp/crm versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Dolibarr dolibarr erp/crm CVEs?
Dolibarr dolibarr erp/crm's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-284 (Improper Access Control).
How many critical Dolibarr dolibarr erp/crm vulnerabilities are there?
Dolibarr dolibarr erp/crm has 22 critical and 38 high-severity CVEs.
What is the average severity of Dolibarr dolibarr erp/crm CVEs?
The average CVSS base score across Dolibarr dolibarr erp/crm's scored CVEs is 7.2.
