https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-15719.htmlhttps://patchthecve.com/cve/CVE-2018-15719.htmlWed, 17 Jun 2026 01:42:59 +0000CRITICAL 9.8: Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information.https://patchthecve.com/cve/CVE-2018-15718.htmlhttps://patchthecve.com/cve/CVE-2018-15718.htmlWed, 17 Jun 2026 01:42:59 +0000HIGH 7.5: Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more.https://patchthecve.com/cve/CVE-2018-15717.htmlhttps://patchthecve.com/cve/CVE-2018-15717.htmlWed, 17 Jun 2026 01:42:59 +0000MEDIUM 5.3: Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes.