Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-15631

Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.9%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
Products affected by CVE-2018-15631
  • Odoo » Odoo » Version: 10.0
    cpe:2.3:a:odoo:odoo:10.0
  • Odoo » Odoo » Version: 11.0
    cpe:2.3:a:odoo:odoo:11.0
  • Odoo » Odoo » Version: 12.0
    cpe:2.3:a:odoo:odoo:12.0
  • Odoo » Odoo » Version: 8.0
    cpe:2.3:a:odoo:odoo:8.0
  • Odoo » Odoo » Version: 9.0
    cpe:2.3:a:odoo:odoo:9.0


Contact Us

Shodan ® - All rights reserved