Opendental
Approved changes feed: RSS · Atom
cpe:2.3:a:opendental:opendental:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Opendental (476d30c1-7f02-52dd-8c7e-efd0f0daee2c) |
|---|---|
| Product | Opendental (382a17ff-bb93-56af-aa91-ae1e7bc08108) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/opendental/opendental |
purl2cpe | 2026-06-01 10:11:15.591220 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-15719 |
vulnerable | 2026-06-08 05:10:55.300730 |
Details available
Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information.
Published: 2018-12-12T19:00:00.000Z
Updated: 2024-09-16T23:20:48.043Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15718 |
vulnerable | 2026-06-08 05:10:55.300413 |
Details available
Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more.
Published: 2018-12-12T19:00:00.000Z
Updated: 2024-09-17T04:13:56.936Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15717 |
vulnerable | 2026-06-08 05:10:55.299920 |
Details available
Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes.
Published: 2018-12-12T19:00:00.000Z
Updated: 2024-09-17T00:26:20.760Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6531 |
vulnerable | 2026-06-08 05:08:02.692304 |
Details available
Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows remote attackers to obtain administrative access by leveraging access to intranet TCP port 3306. NOTE: the vendor disputes this issue, stating that the "vulnerability note ... is factually false ... there is indeed a default blank password, but it can be changed ... We recommend that users change it, each customer receives direction.
Published: 2016-09-24T10:00:00.000Z
Updated: 2024-08-06T01:36:27.279Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.