PatchTheCVEopendental vulnerabilities
Recent CVEs affecting opendental products. 4 tracked.
opendental has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2018-12-12. Highest priority: CVE-2016-6531 (score 65/100).
- CVE-2018-15719 CRITICAL 9.8 UPGRADE Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a bl
- CVE-2018-15718 HIGH 7.5 UPGRADE Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthentica
- CVE-2018-15717 MEDIUM 5.3 UPGRADE Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes.
- CVE-2016-6531 CRITICAL 9.8 UPGRADE Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows remote attackers to obtain admi
FAQ
How do I fix opendental vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is opendental being exploited right now?
None of the tracked opendental CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which opendental CVE should I patch first?
CVE-2016-6531 currently ranks highest (65/100): Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows remote attackers to obtain admi.