Odoo 9.0 Community Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:odoo:odoo:9.0:*:*:*:community:*:*:*
part: a version: 9.0 update: *
| Vendor | Odoo (94abe8c4-9dae-5078-8611-2f86bea86151) |
|---|---|
| Product | Odoo (aa1140ca-e1f6-5d00-8bdd-8699a572b449) |
| Edition | * |
| Language | * |
| Software edition | community |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/jelitox/odoo |
purl2cpe | 2026-06-01 10:18:09.581819 |
pkg:deb/debian/odoo |
purl2cpe | 2026-06-01 10:18:09.581821 |
pkg:deb/ubuntu/odoo |
purl2cpe | 2026-06-01 10:18:09.581822 |
pkg:docker/odoo |
purl2cpe | 2026-06-01 10:18:09.581823 |
pkg:github/odoo/odoo |
purl2cpe | 2026-06-01 10:18:09.581825 |
pkg:rpm/opensuse/odoo |
purl2cpe | 2026-06-01 10:18:09.581826 |
pkg:rpm/opensuse/odoo-release |
purl2cpe | 2026-06-01 10:18:09.581827 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-14887 |
vulnerable | 2026-06-08 05:10:53.635215 |
Details available
Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to deny access to the service and to disclose database names via a crafted request.
Published: 2019-06-28T17:26:42.000Z
Updated: 2024-08-05T09:46:23.768Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14886 |
vulnerable | 2026-06-08 05:10:53.634532 |
Details available
The module-description renderer in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier does not disable RST's local file inclusion, which allows privileged authenticated users to read local files via a crafted module description.
Published: 2019-06-28T17:27:55.000Z
Updated: 2024-08-05T09:46:23.771Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14868 |
vulnerable | 2026-06-08 05:10:53.612106 |
Details available
Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of other users without knowing their current password via a crafted RPC call.
Published: 2019-06-28T17:36:34.000Z
Updated: 2024-08-05T09:38:13.998Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14867 |
vulnerable | 2026-06-08 05:10:53.611568 |
Details available
Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on behalf of customers, and to guess document attribute values, via crafted parameters.
Published: 2019-06-28T17:37:45.000Z
Updated: 2024-08-05T09:38:14.000Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14866 |
vulnerable | 2026-06-08 05:10:53.611161 |
Details available
Incorrect access control in the TransientModel framework in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated attackers to access data in transient records that they do not own by making an RPC call before garbage collection occurs.
Published: 2019-07-03T17:42:07.000Z
Updated: 2024-08-05T09:38:14.077Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14865 |
vulnerable | 2026-06-08 05:10:53.610542 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14864 |
vulnerable | 2026-06-08 05:10:53.610192 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14863 |
vulnerable | 2026-06-08 05:10:53.609682 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14862 |
vulnerable | 2026-06-08 05:10:53.609189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14859 |
vulnerable | 2026-06-08 05:10:53.604843 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14733 |
vulnerable | 2026-06-08 05:10:53.400726 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-10805 |
vulnerable | 2026-06-08 05:08:36.316615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-10804 |
vulnerable | 2026-06-08 05:08:36.316224 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-10803 |
vulnerable | 2026-06-08 05:08:36.313993 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.