Odoo 11.0 Enterprise Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:odoo:odoo:11.0:*:*:*:enterprise:*:*:*
part: a version: 11.0 update: *
| Vendor | Odoo (94abe8c4-9dae-5078-8611-2f86bea86151) |
|---|---|
| Product | Odoo (aa1140ca-e1f6-5d00-8bdd-8699a572b449) |
| Edition | * |
| Language | * |
| Software edition | enterprise |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/jelitox/odoo |
purl2cpe | 2026-06-01 10:18:09.581669 |
pkg:deb/debian/odoo |
purl2cpe | 2026-06-01 10:18:09.581670 |
pkg:deb/ubuntu/odoo |
purl2cpe | 2026-06-01 10:18:09.581672 |
pkg:docker/odoo |
purl2cpe | 2026-06-01 10:18:09.581673 |
pkg:github/odoo/odoo |
purl2cpe | 2026-06-01 10:18:09.581674 |
pkg:rpm/opensuse/odoo |
purl2cpe | 2026-06-01 10:18:09.581676 |
pkg:rpm/opensuse/odoo-release |
purl2cpe | 2026-06-01 10:18:09.581677 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-14887 |
vulnerable | 2026-06-08 05:10:53.635480 |
Details available
Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to deny access to the service and to disclose database names via a crafted request.
Published: 2019-06-28T17:26:42.000Z
Updated: 2024-08-05T09:46:23.768Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14886 |
vulnerable | 2026-06-08 05:10:53.634894 |
Details available
The module-description renderer in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier does not disable RST's local file inclusion, which allows privileged authenticated users to read local files via a crafted module description.
Published: 2019-06-28T17:27:55.000Z
Updated: 2024-08-05T09:46:23.771Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14885 |
vulnerable | 2026-06-08 05:10:53.634195 |
Details available
Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds.
Published: 2019-06-28T17:35:21.000Z
Updated: 2024-08-05T09:46:23.891Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14866 |
vulnerable | 2026-06-08 05:10:53.611256 |
Details available
Incorrect access control in the TransientModel framework in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated attackers to access data in transient records that they do not own by making an RPC call before garbage collection occurs.
Published: 2019-07-03T17:42:07.000Z
Updated: 2024-08-05T09:38:14.077Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14865 |
vulnerable | 2026-06-08 05:10:53.610634 |
Details available
Report engine in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier does not use secure options when passing documents to wkhtmltopdf, which allows remote attackers to read local files.
Published: 2019-07-03T18:40:31.000Z
Updated: 2024-08-05T09:38:13.955Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14863 |
vulnerable | 2026-06-08 05:10:53.609772 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14862 |
vulnerable | 2026-06-08 05:10:53.609373 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14861 |
vulnerable | 2026-06-08 05:10:53.608856 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14859 |
vulnerable | 2026-06-08 05:10:53.605188 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14733 |
vulnerable | 2026-06-08 05:10:53.403792 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.