Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle hospitality opera 5 5.5 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2019-17566
Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET reques...
Apache BatikOracle Api Gateway 11.1.2.4.0Oracle Hyperion Financial Reporting 11.1.2.4Oracle Enterprise Repository 11.1.1.7.0Oracle Business Intelligence 12.2.1.3.0Oracle Retail Order Broker 15.0Oracle Retail Order Broker 16.0Oracle Retail Returns Management 14.1Oracle Retail Point-of-service 14.1Oracle Business Intelligence 12.2.1.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Financial Services Analytical Applications InfrastructureOracle Fusion Middleware Mapviewer 12.2.1.4.0Oracle Instantis EnterprisetrackOracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Retail Integration Bus 15.0.3Oracle Communications Application Session Controller 3.9m0p2Oracle Hospitality Opera 5 5.5Oracle Hospitality Opera 5 5.6Oracle Business Intelligence 5.9.0.0.0Oracle Retail Order Management System Cloud Service 19.5Oracle Jd Edwards Enterpriseone Tools
8.5
CVSSv2
CVE-2020-14858
Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Logging). Supported versions that are affected are 5.5 and 5.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t...
Oracle Hospitality Opera 5 Property Services 5.5Oracle Hospitality Opera 5 Property Services 5.6
7.5
CVSSv2
CVE-2020-14877
Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Logging). Supported versions that are affected are 5.5 and 5.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t...
Oracle Hospitality Opera 5 Property Services 5.5Oracle Hospitality Opera 5 Property Services 5.6
7.5
CVSSv2
CVE-2018-1285
Apache log4net versions prior to 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.
Apache Log4netFedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Oracle Application Testing Suite 13.3.0.1Oracle Hospitality Simphony 19.1.3Oracle Hospitality Simphony 18.2.7.2Oracle Hospitality Opera 5 5.5Oracle Hospitality Opera 5 5.6Netapp Snapcenter -Netapp Manageability Software Development Kit -
3.5
CVSSv2
CVE-2020-2677
Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). Supported versions that are affected are 5.5 and 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle H...
Oracle Hospitality Opera Property Management 5.5Oracle Hospitality Opera Property Management 5.6
5.8
CVSSv2
CVE-2020-2676
Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Printing). The supported version that is affected is 5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hosp...
Oracle Hospitality Opera Property Management 5.5
5.5
CVSSv2
CVE-2020-2675
Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). The supported version that is affected is 5.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospital...
Oracle Hospitality Opera Property Management 5.5
7.5
CVSSv2
CVE-2019-10086
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an malicious user to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of th...
Apache Commons BeanutilsApache Nifi 1.14.0Apache Nifi 1.15.0Debian Debian Linux 8.0Opensuse Leap 15.0Opensuse Leap 15.1Fedoraproject Fedora 30Fedoraproject Fedora 31Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Aus 7.7Redhat Enterprise Linux Server Tus 7.7Redhat Enterprise Linux Eus 7.7Redhat Jboss Enterprise Application Platform 7.2.0Oracle Retail Xstore Point Of Service 15.0Oracle Flexcube Private Banking 12.1.0Oracle Banking Platform 2.4.0Oracle Retail Xstore Point Of Service 7.1Oracle Flexcube Private Banking 12.0.0Oracle Service Bus 11.1.1.9.0Oracle Fusion Middleware 11.1.1.9
4.4
CVSSv2
CVE-2018-2956
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Integration). The supported version that is affected is 5.5.x. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infras...
Oracle Hospitality Opera Property Management 5.5.1Oracle Hospitality Opera Property Management 5.5
5
CVSSv2
CVE-2018-2955
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Integration). The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT...
Oracle Hospitality Opera Property Management 5.5.1Oracle Hospitality Opera Property Management 5.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook