How many Dolibarr ERP CVEs are in CISA KEV?

None of Dolibarr ERP's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Dolibarr ERP vulnerabilities?

Yes — 1 of Dolibarr ERP's CVEs have a known public exploit.

Which versions of Dolibarr ERP are affected?

25 distinct Dolibarr ERP versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Dolibarr ERP CVEs?

Dolibarr ERP's CVEs most often map to these CWE weakness types: CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-862 (Missing Authorization).

What is the average severity of Dolibarr ERP CVEs?

The average CVSS base score across Dolibarr ERP's scored CVEs is 5.3.

Dolibarr ERP Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Dolibarr ERP vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Dolibarr ERP Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Dolibarr ERP has 2 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 5.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Dolibarr ERP, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Dolibarr ERP's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Dolibarr ERP's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of Dolibarr ERP's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Dolibarr ERP version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

23.0.02 CVEs
23.0.12 CVEs
23.0.22 CVEs
23.0.32 CVEs
18.0.01 CVE
18.0.11 CVE
18.0.101 CVE
18.0.21 CVE
18.0.31 CVE
18.0.41 CVE
18.0.51 CVE
18.0.61 CVE

Common weakness types

The CWE weakness categories most often found in Dolibarr ERP CVEs. Follow any weakness for its full explanation.

Other Dolibarr products

Browse vulnerabilities for other products by Dolibarr.

dolibarr158 CVEs dolibarr/dolibarr125 CVEs dolibarr erp/crm111 CVEs ERP CRM5 CVEs dolibarr_erp\/crm4 CVEs Dolibarr ERP CRM3 CVEs Dolibarr ERP & CRM2 CVEs ERP CMS2 CVEs

Frequently asked questions

Common questions about Dolibarr ERP vulnerabilities.

How many CVEs does Dolibarr ERP have?: Dolibarr ERP has 2 published CVE records since 2026.
How many Dolibarr ERP CVEs are in CISA KEV?: None of Dolibarr ERP's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Dolibarr ERP vulnerabilities?: Yes — 1 of Dolibarr ERP's CVEs have a known public exploit.
Which versions of Dolibarr ERP are affected?: 25 distinct Dolibarr ERP versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Dolibarr ERP CVEs?: Dolibarr ERP's CVEs most often map to these CWE weakness types: CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-862 (Missing Authorization).
What is the average severity of Dolibarr ERP CVEs?: The average CVSS base score across Dolibarr ERP's scored CVEs is 5.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Dolibarr ERP vulnerabilities

Monitor new Dolibarr ERP vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

Dolibarr ERP Vulnerabilities