CVE-2018-14868: Odoo

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of other users without knowing their current password via a crafted RPC call.

Affected products

• Odoo Odoo: version 9.0 only

Published 2019-06-28. Last modified 2026-06-17.