CVE-2023-22085: High severity oracle hospitality opera vulnerability

Published Oct 17, 2023

Updated

Vulnerability in the Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). The supported version that is affected is 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in takeover of Hospitality OPERA 5 Property Services. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected Software

1 affected component

Oracle Hospitality OPERA 5 Property Services=5.6

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpuoct2023.html

Event History

Oct 17, 2023

CVE Published

via MITRE·09:02 PM

Data Sourced

via MITRE·09:02 PM

DescriptionSeverity

Data Sourced

10:15 PM

DescriptionSeverity

Frequently Asked Questions

What is CVE-2023-22085?

CVE-2023-22085 is a vulnerability in the Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications.

What is the severity of CVE-2023-22085?

The severity of CVE-2023-22085 is high with a severity rating of 8.8.

How does CVE-2023-22085 affect Oracle Hospitality OPERA 5 Property Services?

CVE-2023-22085 affects Oracle Hospitality OPERA 5 Property Services version 5.6.

How does CVE-2023-22085 impact a low privileged attacker?

CVE-2023-22085 allows a low privileged attacker with network access via HTTP to compromise Hospitality OPERA 5 Property Services.

How can I fix CVE-2023-22085?

To fix CVE-2023-22085, it is recommended to apply the necessary patches provided by Oracle.