oracle hospitality opera 5 property services

Name: oracle hospitality opera 5 property services
Brand: oracle

productUS

cpe:2.3:a:oracle:hospitality_opera_5_property_services:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical6high8medium0low

updated 2026-10-28

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-10219US	medium6.1	2.16% (82nd)	Exploit	no fix	2019-11-08	= 5.6
CVE-2023-21932US	—	45.0% (99th)	—	no fix	2023-04-18	= 5.6
CVE-2017-10182US	medium4.4	1.50% (74th)	—	no fix	2017-08-08	3 versions
CVE-2020-14877US	high7.5	1.47% (74th)	—	no fix	2020-10-21	2 versions
CVE-2016-5565US	high7.7	1.41% (73rd)	—	no fix	2016-10-25	6 versions
CVE-2020-14858US	high8.5	1.38% (72nd)	—	no fix	2020-10-21	2 versions
CVE-2016-5564US	high7.4	1.23% (69th)	—	no fix	2016-10-25	6 versions
CVE-2017-3574US	high7.1	1.10% (66th)	—	no fix	2017-04-24	6 versions
CVE-2016-5563US	high7.9	1.07% (65th)	—	no fix	2016-10-25	6 versions
CVE-2017-3573US	medium6.1	1.01% (63rd)	—	no fix	2017-04-24	6 versions
CVE-2017-3560US	medium4.3	1.00% (63rd)	—	no fix	2017-04-24	6 versions
CVE-2017-3552US	medium4.3	0.96% (61st)	—	no fix	2017-04-24	6 versions
CVE-2023-22085US	—	0.81% (57th)	—	no fix	2023-10-17	= 5.6
CVE-2017-3569US	medium5.4	0.78% (56th)	—	no fix	2017-04-24	6 versions
CVE-2023-22087US	—OT elevated	0.68% (52nd)	—	no fix	2023-10-17	= 5.6
CVE-2026-34311US	—	0.46% (40th)	—	no fix	2026-05-28	5 versions
CVE-2017-10197US	medium4.6	0.45% (39th)	—	no fix	2017-10-19	2 versions
CVE-2026-71106US	—	0.42% (36th)	—	no fix	2026-08-18	2 versions
CVE-2017-3568US	medium6.5	0.38% (32nd)	—	no fix	2017-04-24	6 versions

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-287Improper Authentication3 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.