CVE-2018-15632
Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an…
Published Dec 22, 2020 · updated Jun 16, 2026 · odoo odoo
Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials.
Timeline
Detection, updates, and resolution for this record.
Dec 22, 2020 · Catalog
Detected
Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials.
Jun 16, 2026 · Catalog
Updated
Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials.
Affected
- cpe odoo/odooversion unspecified
Sources
- NIST NVDCVE-2018-15632
Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials.
nvd.nist.gov - Odoo SecurityCVE-2018-15632
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com