Unauthenticated Network Vulnerability in Oracle Hospitality OPERA 5

CVE-2024-21172

Summary

A significant vulnerability has been identified in the Oracle Hospitality OPERA 5 product, specifically within the Opera Servlet component. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Although the primary focus is on Oracle Hospitality OPERA 5, successful exploitation of this issue may also have ramifications on related Oracle products, potentially expanding the attack surface. The impacted supported versions include 5.6.19.19, 5.6.25.8, and 5.6.26.4. Attackers can leverage this vulnerability to gain control over the system, threatening the confidentiality, integrity, and availability of sensitive data. For further information, refer to the official Oracle Advisory.

References