Hospitality Opera 5 vulnerabilities

2 known vulnerabilities in Hospitality Opera 5 from Oracle. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Oracle Hospitality OPERA 5: Uncontrolled Resource Consumption

  CVE-2025-21547Jan 21, 2025Oracle

  Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Opera Servlet). Supported versions that are affected are 5.6.19.20, 5.6.25.8, 5.6.26.6 and 5.6.27.1. Easily exploitable vulnerability allows unauthenticated

• 9.8 Critical severity

  Apache Struts Remote Code Execution Exploited

  CVE-2020-17530Dec 11, 2020ApacheEPSS 96.3%

  Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.