PatchTheCVEopendental vulnerabilities and fixes
Recent CVEs affecting opendental, with upgrade or downgrade steps. 3 tracked.
opendental has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2018-12-12. Highest priority: CVE-2018-15719 (score 62/100).
- CVE-2018-15719 CRITICAL 9.8 UPGRADE Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a bl
- CVE-2018-15718 HIGH 7.5 UPGRADE Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthentica
- CVE-2018-15717 MEDIUM 5.3 UPGRADE Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes.
FAQ
How do I fix opendental vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is opendental being exploited right now?
None of the tracked opendental CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which opendental CVE should I patch first?
CVE-2018-15719 currently ranks highest (62/100): Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a bl.