What’s Vulnerable › Vulnerabilities

CVE-2018-14885

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-28 · updated 2026-06-17
• Weakness: CWE-284

Description

Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds.

Affected products

• Odoo: 10.0, 11.0

References

• https://github.com/odoo/odoo/commits/master
• https://github.com/odoo/odoo/issues/32512
• https://github.com/odoo/odoo/commits/master
• https://github.com/odoo/odoo/issues/32512

Get alerted when CVE-2018-14885 or the next vulnerability affects your stack