[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwwwKFW6V0YCoHSuN9fU1Zhh1Xsg0kb1lVSxv1f6go6c":3,"g5a-family:oracle\u002Fhospitality_opera_5":129,"g5a-ex:oracle\u002Fhospitality_opera_5@*":133},{"success":4,"data":5},true,{"product":6,"versions":43,"topVulnerabilitiesByEpss":56,"kevVulnerabilities":101,"seoMetadata":107,"meta":126},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":42},"oracle","hospitality_opera_5",12,7,1,"2024-10-15",[14,19,22,24,26,28,30,32,34,36,38,40],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"5.5",3,0,false,{"version":20,"cve_count":21,"kev_count":11,"has_kev":4},"5.6",6,{"version":23,"cve_count":11,"kev_count":17,"has_kev":18},"5.6.19.19",{"version":25,"cve_count":17,"kev_count":17,"has_kev":18},"5.6.19.20",{"version":27,"cve_count":17,"kev_count":17,"has_kev":18},"5.6.19.23",{"version":29,"cve_count":17,"kev_count":17,"has_kev":18},"5.6.25.17",{"version":31,"cve_count":11,"kev_count":17,"has_kev":18},"5.6.25.8",{"version":33,"cve_count":17,"kev_count":17,"has_kev":18},"5.6.26.10",{"version":35,"cve_count":11,"kev_count":17,"has_kev":18},"5.6.26.4",{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},"5.6.26.6",{"version":39,"cve_count":17,"kev_count":17,"has_kev":18},"5.6.27.1",{"version":41,"cve_count":17,"kev_count":17,"has_kev":18},"5.6.27.4","Hospitality Opera 5 by Oracle is a technology product with 12 tracked versions and 7 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[44,45,46,47,48,49,50,51,52,53,54,55],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":11,"has_kev":4},{"version":23,"cve_count":11,"kev_count":17,"has_kev":18},{"version":25,"cve_count":17,"kev_count":17,"has_kev":18},{"version":27,"cve_count":17,"kev_count":17,"has_kev":18},{"version":29,"cve_count":17,"kev_count":17,"has_kev":18},{"version":31,"cve_count":11,"kev_count":17,"has_kev":18},{"version":33,"cve_count":17,"kev_count":17,"has_kev":18},{"version":35,"cve_count":11,"kev_count":17,"has_kev":18},{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},{"version":39,"cve_count":17,"kev_count":17,"has_kev":18},{"version":41,"cve_count":17,"kev_count":17,"has_kev":18},[57,65,72,77,83,89,96],{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":62,"severity":63,"isKev":4,"epssScore":64},"CVE-2020-17530","Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.","2020-12-11",9.8,"v3.1","Critical",0.95931,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":62,"severity":70,"isKev":18,"epssScore":71},"CVE-2019-10086","In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.","2019-08-20",7.3,"High",0.28384,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":61,"cvssVersion":62,"severity":63,"isKev":18,"epssScore":76},"CVE-2018-1285","Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.","2020-05-11",0.17823,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":62,"severity":70,"isKev":18,"epssScore":82},"CVE-2019-17566","Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the \"xlink:href\" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.","2020-11-12",7.5,0.10867,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"cvssVersion":62,"severity":70,"isKev":18,"epssScore":88},"CVE-2021-2351","Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: \"Changes in Native Network Encryption with the July 2021 Critical Patch Update\" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H).","2021-07-21",8.3,0.02432,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":93,"cvssVersion":62,"severity":94,"isKev":18,"epssScore":95},"CVE-2020-17521","Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts. Users not using the extension methods mentioned in the advisory are not affected, but may wish to read the advisory for further details. Versions Affected: 2.0 to 2.4.20, 2.5.0 to 2.5.13, 3.0.0 to 3.0.6, and 4.0.0-alpha-1. Fixed in versions 2.4.21, 2.5.14, 3.0.7, 4.0.0-alpha-2.","2020-12-07",5.5,"Medium",0.01027,{"cveId":97,"description":98,"publishedDate":12,"cvssScore":99,"cvssVersion":62,"severity":63,"isKev":18,"epssScore":100},"CVE-2024-21172","Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Opera Servlet).  Supported versions that are affected are 5.6.19.19, 5.6.25.8 and  5.6.26.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5.  While the vulnerability is in Oracle Hospitality OPERA 5, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in takeover of Oracle Hospitality OPERA 5. CVSS 3.1 Base Score 9.0 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H).",9,0.00503,[102],{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"severity":63,"isKev":4,"epssScore":64,"cisaVulnName":103,"cisaDateAdded":104,"cisaShortDescription":105,"cisaRequiredAction":106},"Apache Struts Remote Code Execution Vulnerability","2021-11-03","Forced Object-Graph Navigation Language (OGNL) evaluation in Apache Struts, when evaluated on raw user input in tag attributes, can lead to remote code execution.","Apply updates per vendor instructions.",{"title":108,"metaDescription":109,"keywords":110,"structuredData":111},"Hospitality Opera 5 by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Hospitality Opera 5 by Oracle covering 12 versions with 7 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Hospitality Opera 5 vulnerabilities, Hospitality Opera 5 security, Hospitality Opera 5 CVE, Oracle Hospitality Opera 5, Hospitality Opera 5 threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Hospitality Opera 5 KEV, Hospitality Opera 5 exploited vulnerabilities",{"@context":112,"@type":113,"name":114,"description":109,"url":115,"manufacturer":116,"applicationCategory":120,"softwareVersion":121,"mainEntity":122},"https:\u002F\u002Fschema.org","SoftwareApplication","Hospitality Opera 5","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fhospitality_opera_5",{"@type":117,"name":118,"url":119},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","12 versions tracked",{"@type":123,"name":124,"description":125,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Hospitality Opera 5 Security Vulnerabilities","Security vulnerabilities affecting Hospitality Opera 5 by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":127,"apiVersion":128},"2026-10-17T15:10:19.505Z","3.0",[130],{"product":131,"cves":132},"hospitality_opera_5_property_services",17,{"rows":134,"total":11,"capped":18,"failed":17},[135],{"cveId":58,"name":103,"severity":63,"cvss":61,"added":104,"epss":64,"published":136,"ranges":137,"checked":4,"hits":138,"covers":18},"2020-12-11T02:15:10.883",[20],[]]