CVE-2018-14866
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-14866
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Incorrect access control in the TransientModel framework in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated attackers to access data in transient records that they do not own by making an RPC call before garbage collection occurs.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Odoo 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Odoo是比利时Odoo公司的一套企业资源计划（ERP）和客户关系管理（CRM）系统。该系统采用Python语言开发，PostgreSQL作为数据库，并包括销售管理、库存管理、财务管理等模块。 Odoo（社区版和企业版）11.0及之前版本中的TransientModel框架存在权限许可和访问控制问题漏洞。该漏洞源于网络系统或产品缺乏有效的权限许可和访问控制措施。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2018-14866
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-14866
Please Login to view more intelligence information
- https://github.com/odoo/odoo/issues/32509x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2018-14866
Same Patch Batch · n/a · 2019-07-03 · 74 CVEs total
| CVE-2017-18346 | CMS Web-Gooroo SQL注入漏洞 | |
| CVE-2018-11425 | Moxa OnCell G3470A-LTE 缓冲区错误漏洞 | |
| CVE-2018-10986 | Open-Xchange Guard 跨站请求伪造漏洞 | |
| CVE-2017-9327 | Cloudera Manager 授权问题漏洞 | |
| CVE-2017-9326 | Cloudera Manager 信任管理问题漏洞 | |
| CVE-2017-9325 | Cloudera Manager 授权问题漏洞 | |
| CVE-2018-15811 | DNN 加密问题漏洞 | |
| CVE-2017-6900 | RIELLO UPS NetMan 信任管理问题漏洞 | |
| CVE-2017-6216 | novaksolutions/infusionsoft-php-sdk 跨站脚本漏洞 | |
| CVE-2018-11686 | Devaldi FlexPaper 输入验证错误漏洞 | |
| CVE-2019-13186 | MiniCMS 跨站脚本漏洞 | |
| CVE-2018-15812 | DNN 安全特征问题漏洞 | |
| CVE-2017-17972 | Archon 跨站脚本漏洞 | |
| CVE-2018-18325 | DNN 加密问题漏洞 | |
| CVE-2018-18326 | DNN 安全特征问题漏洞 | |
| CVE-2018-12250 | Elite Graphix Elite CMS Pro SQL注入漏洞 | |
| CVE-2018-12715 | DIGISOL SYSTEMS DG-HR3400 跨站脚本漏洞 | |
| CVE-2019-12570 | WordPress Server Status by Hostname/IP插件SQL注入漏洞 | |
| CVE-2019-7165 | DOSBox 缓冲区错误漏洞 | |
| CVE-2019-9823 | JetBrains IntelliJ IDEA 信任管理问题漏洞 |
Showing top 20 of 74 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem
V. Comments for CVE-2018-14866
No comments yet