Hospitality Opera 5 (Oracle) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2026-01-20. Vendor: Oracle.
CVEs of Hospitality Opera 5
- CVE-2026-21967 - CVSS 8.6 (high), 2026-01-20: Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Opera Servlet). Supported versions that are affected…
- CVE-2026-21966 - CVSS 6.1 (medium), 2026-01-20: Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). Supported versions that are…
- CVE-2025-21547 - CVSS 9.1 (critical), 2025-01-21: Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Opera Servlet). Supported versions that are affected…
- CVE-2024-21172 - CVSS 9 (critical), 2024-10-15: Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Opera Servlet). Supported versions that are affected…
- CVE-2021-2351 - CVSS 8.3 (high), 2021-07-21: Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c.…
- CVE-2020-17530 - CVSS 9.8 (critical), 2020-12-11: Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 -…
- CVE-2020-17521 - CVSS 5.5 (medium), 2020-12-07: Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was…
- CVE-2019-17566 - CVSS 7.5 (high), 2020-11-12: Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted…
- CVE-2018-1285 - CVSS 9.8 (critical), 2020-05-11: Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in…
- CVE-2019-10086 - CVSS 7.3 (high), 2019-08-20: In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader…
