CVE-2023-22087: High severity oracle hospitality opera vulnerability

Published Oct 17, 2023

Updated

Vulnerability in the Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). The supported version that is affected is 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in takeover of Hospitality OPERA 5 Property Services. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected Software

1 affected component

Oracle Hospitality OPERA 5 Property Services=5.6

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpuoct2023.html

Event History

Oct 17, 2023

CVE Published

via MITRE·09:02 PM

Data Sourced

via MITRE·09:02 PM

DescriptionSeverity

Data Sourced

10:15 PM

DescriptionSeverity

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2023-22087.

What is the affected software?

The affected software is Oracle Hospitality OPERA 5 Property Services version 5.6.

What is the severity keyword?

The severity keyword is high.

What is the severity value?

The severity value is 8.8.

Is there a reference for this vulnerability?

Yes, there is a reference for this vulnerability. You can find it at the following link: [Oracle Security Alerts](https://www.oracle.com/security-alerts/cpuoct2023.html)