Product by Oracle

    Oracle Hospitality OPERA 5

    10 known vulnerabilities in Oracle Hospitality OPERA 5 (Oracle), 1 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Hospitality OPERA 5 (Oracle)
    CriticalCVE-2020-17530

    Apache Struts Remote Code Execution Vulnerability

    In CISA KEValso in 8 other products

    		9.8
    CriticalCVE-2018-1285

    Apache log4net: XML External Entity (XXE)

    also in 6 other products

    		9.8
    HighCVE-2019-10086

    Apache Commons Beanutils: security vulnerability

    also in 58 other products

    		7.3
    HighCVE-2019-17566

    Apache Batik: Server-Side Request Forgery (SSRF)

    also in 17 other products

    		7.5
    HighCVE-2021-2351

    Oracle WebLogic Server: security vulnerability

    also in 97 other products

    		8.3
    CriticalCVE-2025-21547

    Oracle Hospitality OPERA 5: security vulnerability

    also in 1 other product

    		9.1
    CriticalCVE-2024-21172

    Oracle Hospitality OPERA 5: security vulnerability

    also in 1 other product

    		9.0
    HighCVE-2026-21967

    Oracle Hospitality OPERA 5: Denial of Service

    also in 1 other product

    		8.6
    MediumCVE-2020-17521

    Apache Groovy: security vulnerability

    also in 21 other products

    		5.5
    MediumCVE-2026-21966

    Oracle Hospitality OPERA 5 Property Services: security vulnerability

    also in 1 other product

    		6.1

    All products by Oracle