Known vulnerabilities in Oracle Hospitality OPERA 5

Vendor: Oracle
Software: Oracle Hospitality OPERA 5
Software CPE: cpe:2.3:a:oracle:oracle_hospitality_opera_5:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 12
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Hospitality OPERA 5 Oracle Hospitality OPERA 5 is affected by 12 known vulnerabilities: 6 high, 4 medium, 2 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103155 - Improper input validation
CVE-2025-21547		 CWE-20 High
No
No
 - 21.01.2025 -
#VU98642 - Improper input validation
CVE-2024-21172		 CWE-20 High
No
No
 - 15.10.2024 -
#VU62084 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31805		 CWE-94 High
Available
No
 - 12.04.2022 -
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 -
#VU49772 - Improper input validation
CVE-2018-1285		 CWE-20 High
No
No
 - 20.01.2021 -
#VU48815 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-17530		 CWE-94 High
Available
Exploited
 - 08.12.2020 -
#VU48792 - Incorrect Default Permissions
CVE-2020-17521		 CWE-276 Low
No
No
 - 06.12.2020 -
#VU29068 - Server-Side Request Forgery (SSRF)
CVE-2019-17566		 CWE-918 Medium
No
No
 - 16.06.2020 -
#VU25081 - Improper input validation
CVE-2020-2675		 CWE-20 Medium
No
No
 - 08.02.2020 -
#VU25082 - Improper input validation
CVE-2020-2676		 CWE-20 Medium
No
No
 - 08.02.2020 -
#VU25083 - Improper input validation
CVE-2020-2677		 CWE-20 Medium
No
No
 - 08.02.2020 -
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 -