How many Dolibarr ERP CVEs are in CISA KEV?

None of Dolibarr ERP's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Dolibarr ERP vulnerabilities?

Yes — 1 of Dolibarr ERP's CVEs have a known public exploit.

Which versions of Dolibarr ERP are affected?

25 distinct Dolibarr ERP versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Dolibarr ERP CVEs?

Dolibarr ERP's CVEs most often map to these CWE weakness types: CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-862 (Missing Authorization).

What is the average severity of Dolibarr ERP CVEs?

The average CVSS base score across Dolibarr ERP's scored CVEs is 5.3.

Dolibarr ERP Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Dolibarr ERP vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Dolibarr ERP Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Dolibarr ERP has 2 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 5.3.

Severity and exploitation

How the CVSS severity of Dolibarr ERP's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Dolibarr ERP's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of Dolibarr ERP's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Dolibarr ERP version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

23.0.02 CVEs
23.0.12 CVEs
23.0.22 CVEs
23.0.32 CVEs
18.0.01 CVE
18.0.11 CVE
18.0.101 CVE
18.0.21 CVE
18.0.31 CVE
18.0.41 CVE
18.0.51 CVE
18.0.61 CVE

Common weakness types

The CWE weakness categories most often found in Dolibarr ERP CVEs. Follow any weakness for its full explanation.

Other Dolibarr products

Browse vulnerabilities for other products by Dolibarr.

dolibarr164 CVEs dolibarr erp/crm126 CVEs dolibarr/dolibarr125 CVEs ERP CRM5 CVEs dolibarr_erp\/crm4 CVEs Dolibarr ERP CRM3 CVEs Dolibarr ERP & CRM2 CVEs ERP CMS2 CVEs

Frequently asked questions

Common questions about Dolibarr ERP vulnerabilities.

How many CVEs does Dolibarr ERP have?: Dolibarr ERP has 2 published CVE records since 2026.
How many Dolibarr ERP CVEs are in CISA KEV?: None of Dolibarr ERP's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Dolibarr ERP vulnerabilities?: Yes — 1 of Dolibarr ERP's CVEs have a known public exploit.
Which versions of Dolibarr ERP are affected?: 25 distinct Dolibarr ERP versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Dolibarr ERP CVEs?: Dolibarr ERP's CVEs most often map to these CWE weakness types: CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-862 (Missing Authorization).
What is the average severity of Dolibarr ERP CVEs?: The average CVSS base score across Dolibarr ERP's scored CVEs is 5.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Dolibarr ERP vulnerabilities

Get an alert for each new Dolibarr ERP CVE, with AI-written analysis and remediation steps.

Create an account See pricing

Dolibarr ERP Vulnerabilities