VYPR
← All advisories
High severity8.1NVD Advisory· Published Jul 3, 2019· Updated Jun 17, 2026

CVE-2018-14863

CVE-2018-14863

Description

Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Odcms/Odoo6 versions
    cpe:2.3:a:odoo:odoo:10.0:*:*:*:community:*:*:*+ 5 more
    • cpe:2.3:a:odoo:odoo:10.0:*:*:*:community:*:*:*
    • cpe:2.3:a:odoo:odoo:10.0:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:odoo:odoo:11.0:*:*:*:community:*:*:*
    • cpe:2.3:a:odoo:odoo:11.0:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:odoo:odoo:9.0:*:*:*:community:*:*:*
    • cpe:2.3:a:odoo:odoo:9.0:*:*:*:enterprise:*:*:*
  • Odoo/Odoo Enterprisedescription
  • Odcms/Enterprisellm-create
    Range: 9.0-11.0
  • Odcms/Communityllm-create
    Range: 8.0-11.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.