VULNERABILITY INTELLIGENCE

CVE-2018-15632

CVSS score9.1 CRITICAL
EPSS probability1.18%
CISA KEVNot currently listed
Published2020-12-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Description

Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references