Oracle Hospitality OPERA 5 Property Services Vulnerability
CVE-2017-3573

6.1MEDIUM

Key Information:

Vendor
Oracle
Status
Hospitality Opera 5 Property Services
Vendor
CVE Published:
24 April 2017

Summary

This vulnerability in Oracle Hospitality OPERA 5 Property Services allows unauthenticated attackers to exploit network access via HTTP. Attackers can compromise the system by leveraging required human interaction from an external source. While primarily affecting OPERA 5, successful exploits may also threaten additional Oracle products, leading to unauthorized alterations or access of sensitive data. Organizations using the affected versions should act promptly to mitigate potential security risks.

Affected Version(s)

Hospitality OPERA 5 Property Services 5.4.0.x

Hospitality OPERA 5 Property Services 5.4.1.x

Hospitality OPERA 5 Property Services 5.4.2.x

References

http://www.oracle.com/technetwork/security-advisory/cpuap...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/97868
vdb-entryx_refsource_BID

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.