CVE-2019-11780 medium Priorität · verfolgen · 33 EPSS 0.021 · 81. Perzentil EPSS 2.1% Wahrscheinlichkeit 0.021 Perzentil 81. Perzentil EPSS · Exploit-Vorhersage — Wahrscheinlichkeit, dass diese CVE in den nächsten 30 Tagen ausgenutzt wird (0–1), sowie ihr Perzentilrang unter allen CVEs EU RU US grimoire priority P3 · Track
2.06% (81st) EPSS
CVSS 5.5 · medium
4 sources
cnnvd · enisa_euvd · fstec_bdu · nvd
EPSS · bewertet 2026-10-27
Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation.
umfeld Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen ⚠ Quellen uneinig · medium–high · 5.5–8.1
v2.0 5.5 medium AV:N/AC:L/Au:S/C:P/I:P/A:N CVSS v2.0 5.5 medium Access Vector Network Access Complexity Low Authentication Single Confidentiality Impact Partial Integrity Impact Partial Availability Impact None primary · NVD / NIST US Ausnutzbarkeit 8 · Auswirkung 4.9 v3.1 8.1 high CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS v3.1 8.1 high Attack Vector Network Attack Complexity Low Privileges Required Low User Interaction None Scope Unchanged Confidentiality Impact High Integrity Impact High Availability Impact None primary · NVD / NIST US Ausnutzbarkeit 2.8 · Auswirkung 5.2 v3.1 8.1 high AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS v3.1 8.1 high Access Vector Network Access Complexity Low Availability Impact None secondary · FSTEC (BDU) RU v3.1 8.1 high CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS v3.1 8.1 high Attack Vector Network Attack Complexity Low Privileges Required Low User Interaction None Scope Unchanged Confidentiality Impact High Integrity Impact High Availability Impact None secondary · ENISA EU v3.1 8.1 high CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS v3.1 8.1 high Attack Vector Network Attack Complexity Low Privileges Required Low User Interaction None Scope Unchanged Confidentiality Impact High Integrity Impact High Availability Impact None secondary · security@odoo.com Ausnutzbarkeit 2.8 · Auswirkung 5.2 v3.1 7.4 high CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U CVSS v3.1 7.4 high Attack Vector Network Attack Complexity Low Privileges Required Low User Interaction None Scope Unchanged Confidentiality Impact High Integrity Impact High Availability Impact None secondary · CVSS-BT (t0sche) Weitere Namen und Kennungen dieser Entität.
Externe Belege — Patches, Meldungen, Analysen.
← zurück zur Suche