CVE-2018-15632
Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an…
Published Dec 22, 2020 · updated Jun 17, 2026 · odoo odoo
Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials.
Timeline
Detection, updates, and resolution for this record.
Dec 22, 2020 · Catalog
Detected
Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials.
Jun 16, 2026 · Catalog
Updated
Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials.
Jun 17, 2026 · NIST NVD
Updated
Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials.
Affected
- cpe odoo/odooversion unspecified
Sources
- CVE.orgCVE-2018-15632
Official CVE identifier
cve.org - FIRST EPSSCVE-2018-15632
30-day exploitation probability 1.2%
first.org - NIST NVDCVE-2018-15632
Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials.
nvd.nist.gov - Odoo SecurityCVE-2018-15632
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com