13.0

DATE	CVE	VULNERABILITY TITLE	RISK
2020-12-22	CVE-2018-15638	Cross-site Scripting vulnerability in Odoo Cross-site scripting (XSS) issue in mail module in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via crafted channel names. network odoo CWE-79	3.5
2020-12-22	CVE-2018-15634	Cross-site Scripting vulnerability in Odoo Cross-site scripting (XSS) issue in attachment management in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via a crafted link. network odoo CWE-79	4.3
2019-12-19	CVE-2019-11780	Unspecified vulnerability in Odoo 13.0 Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation. network low complexity odoo	5.5