Known vulnerabilities in Oracle Hospitality OPERA 5

Known vulnerabilities in Oracle Hospitality OPERA 5

Vendor: Oracle

Software: Oracle Hospitality OPERA 5

Software CPE: cpe:2.3:a:oracle:oracle_hospitality_opera_5:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 12

Public exploits: 2

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU103155 - Improper input validation CVE-2025-21547	CWE-20	High	No	No	-	21.01.2025	SB2025012225
#VU98642 - Improper input validation CVE-2024-21172	CWE-20	High	No	No	-	15.10.2024	SB20241015221
#VU62084 - Improper Control of Generation of Code ('Code Injection') CVE-2021-31805	CWE-94	High	Available	No	-	12.04.2022	SB2022041218 SB2022061004 SB2022062415 and 10 more
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	-	20.07.2021	SB2021072053 SB2022011824 SB2022011825 and 110 more
#VU49772 - Improper input validation CVE-2018-1285	CWE-20	High	No	No	-	20.01.2021	SB2021012037 SB2021042549 SB2022012806 and 9 more
#VU48815 - Improper Control of Generation of Code ('Code Injection') CVE-2020-17530	CWE-94	High	Available	Exploited	-	08.12.2020	SB2020120801 SB2020122202 SB2021042111 and 9 more
#VU48792 - Incorrect Default Permissions CVE-2020-17521	CWE-276	Low	No	No	-	06.12.2020	SB2020120601 SB2021012082 SB2021012083 and 31 more
#VU29068 - Server-Side Request Forgery (SSRF) CVE-2019-17566	CWE-918	Medium	No	No	-	16.06.2020	SB2020061613 SB2020062304 SB2020072310 and 23 more
#VU25081 - Improper input validation CVE-2020-2675	CWE-20	Medium	No	No	-	08.02.2020	SB20200114153
#VU25082 - Improper input validation CVE-2020-2676	CWE-20	Medium	No	No	-	08.02.2020	SB20200114153
#VU25083 - Improper input validation CVE-2020-2677	CWE-20	Medium	No	No	-	08.02.2020	SB20200114153
#VU20844 - Protection Mechanism Failure CVE-2019-10086	CWE-693	Low	No	No	-	04.09.2019	SB2019090405 SB2019090406 SB2019121902 and 112 more