CVE-2018-15640
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.
Published Apr 9, 2019 · updated Jun 17, 2026 · odoo odoo
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.
Timeline
Detection, updates, and resolution for this record.
Apr 9, 2019 · Catalog
Detected
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.
Jun 16, 2026 · Catalog
Updated
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.
Jun 17, 2026 · NIST NVD
Updated
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.
Affected
- cpe odoo/odooversion unspecified
Sources
- CVE.orgCVE-2018-15640
Official CVE identifier
cve.org - FIRST EPSSCVE-2018-15640
30-day exploitation probability 7.8%
first.org - NIST NVDCVE-2018-15640
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.
nvd.nist.gov - Odoo SecurityCVE-2018-15640
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com