CVE-2016-5565: Infoleak

Published Oct 25, 2016

Updated

Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality via vectors related to OPERA.

Affected Software

6 affected components

Oracle Hospitality OPERA 5 Property Services=5.4.0.0

Oracle Hospitality OPERA 5 Property Services=5.4.1.0

Oracle Hospitality OPERA 5 Property Services=5.4.2.0

Oracle Hospitality OPERA 5 Property Services=5.4.3.0

Oracle Hospitality OPERA 5 Property Services=5.5.0.0

Oracle Hospitality OPERA 5 Property Services=5.5.1.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5565?

CVE-2016-5565 has been rated as a medium-severity vulnerability affecting confidentiality for Oracle Hospitality OPERA users.

How do I fix CVE-2016-5565?

To address CVE-2016-5565, you should update the Oracle Hospitality OPERA 5 Property Services to the latest version provided by Oracle.

Who is affected by CVE-2016-5565?

CVE-2016-5565 affects remote authenticated users of Oracle Hospitality Applications versions 5.4.0.0 through 5.5.1.0.

What types of attacks are associated with CVE-2016-5565?

CVE-2016-5565 allows remote authenticated users to impact confidentiality, potentially leading to data exposure.

When was CVE-2016-5565 disclosed?

CVE-2016-5565 was disclosed in October 2016 as part of Oracle's security advisory.