CVE-2023-21932
First published: Tue Apr 18 2023(Updated: )
Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: OXI). The supported version that is affected is 5.6. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. While the vulnerability is in Oracle Hospitality OPERA 5 Property Services, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality OPERA 5 Property Services accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality OPERA 5 Property Services. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Hospitality OPERA | =5.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Oracle Hospitality OPERA 5 Property Services vulnerability?
The vulnerability ID for this Oracle Hospitality OPERA 5 Property Services vulnerability is CVE-2023-21932.
What is the affected software of this vulnerability?
The affected software of this vulnerability is Oracle Hospitality OPERA 5 Property Services version 5.6.
What is the severity rating of this vulnerability?
The severity rating of this vulnerability is high with a score of 7.2.
How can an attacker exploit this vulnerability?
This vulnerability can be exploited by a high privileged attacker with network access via HTTP.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at https://www.oracle.com/security-alerts/cpuapr2023.html.
- agent/type
- agent/softwarecombine
- agent/author
- agent/severity
- agent/references
- agent/first-publish-date
- agent/event
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle hospitality opera
- version/oracle hospitality opera/5.6