Security Resilience

CVE-2023-22085

Oracle Hospitality Opera 5 Property Services 5.6

Published
17 October 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 8.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0067 51th percentile
Risk Priority 65 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-22085 is a high-severity an unspecified weakness vulnerability in Oracle Hospitality Opera 5 Property Services. Its CVSS base score is 8.8 (High).

Operationally, ranked in the top 49% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Vulnerability in the Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). The supported version that is affected is 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality OPERA 5…

more

Property Services. Successful attacks of this vulnerability can result in takeover of Hospitality OPERA 5 Property Services. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-21932Same product: Oracle Hospitality Opera 5 Property Services
CVE-2026-34311Same product: Oracle Hospitality Opera 5 Property Services
CVE-2026-71106Same product: Oracle Hospitality Opera 5 Property Services
CVE-2023-22087Same product: Oracle Hospitality Opera 5 Property Services
CVE-2026-71053Same vendor: Oracle
CVE-2024-21157Same vendor: Oracle
CVE-2026-62582Same vendor: Oracle
CVE-2026-70881Same vendor: Oracle
CVE-2026-73925Same vendor: Oracle
CVE-2024-20941Same vendor: Oracle

Affected Assets

oracle
hospitality opera 5 property services
5.6

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References