Oracle Hospitality Opera 5 Property Services vulnerabilities

19 CVEs affecting Oracle Hospitality Opera 5 Property Services, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-71106, published 2026-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-21932, published 2023-04-18. High severity, CVSS 7.2. EPSS: 45% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: OXI). The supported version that is affected is 5.6. Difficult to exploit…
CVE-2019-10219, published 2019-11-08. Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions.…
CVE-2017-10182, published 2017-08-08. Medium severity, CVSS 4.4. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Export Functionality). Supported versions that are affected are…
CVE-2020-14877, published 2020-10-21. Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Logging). Supported versions that are affected are 5.5 and 5.6. Easily…
CVE-2016-5565, published 2016-10-25. High severity, CVSS 7.7. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated…
CVE-2020-14858, published 2020-10-21. Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Logging). Supported versions that are affected are 5.5 and 5.6. Easily…
CVE-2016-5564, published 2016-10-25. High severity, CVSS 7.4. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated…
CVE-2017-3574, published 2017-04-24. High severity, CVSS 7.1. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA License code configuration). Supported versions that are affected…
CVE-2016-5563, published 2016-10-25. High severity, CVSS 7.9. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote administrators…
CVE-2017-3573, published 2017-04-24. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Printing). Supported versions that are affected are 5.4.0.x,…

Latest

CVE-2026-71106, published 2026-08-18. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera Servlet). Supported versions that are affected are 5.6.28.0-5.6.28.1.…
CVE-2026-34311, published 2026-05-28. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). Supported versions that are affected are 5.6.19.24, 5.6.22,…
CVE-2023-22087, published 2023-10-17. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Vulnerability in the Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). The supported version that is affected is 5.6. Easily exploitable…
CVE-2023-22085, published 2023-10-17. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Vulnerability in the Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). The supported version that is affected is 5.6. Easily exploitable…
CVE-2017-10197, published 2017-10-19. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Folios). The supported version that is affected is 5.4.2.x through…