Oracle Hospitality OPERA 5 Unauthenticated HTTP Vulnerability Allowing Data Access and Denial-of-Service

A vulnerability exists in Oracle Hospitality OPERA 5 versions 5.6.19.20, 5.6.25.8, 5.6.26.6, and 5.6.27.1 within the Opera Servlet component. This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the application. Successful exploitation can lead to unauthorized access to critical data or complete access to all accessible data in Oracle Hospitality OPERA 5, as well as the unauthorized ability to cause a complete denial-of-service by hanging the application or causing it to crash frequently and repeatably.

Impact

Exploitation of this vulnerability allows for unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 accessible data. Additionally, it enables an unauthorized ability to cause a complete denial-of-service by hanging the application or causing it to crash frequently and repeatably.