Oracle Hospitality OPERA 5 Unauthorized Data Access and Partial Denial-of-Service Vulnerability

A vulnerability exists in Oracle Hospitality OPERA 5 versions 5.6.19.23, 5.6.25.17, 5.6.26.10, and 5.6.27.4 within the Opera Servlet component. This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the application. Successful exploitation can lead to unauthorized access to critical data, complete access to all OPERA 5 accessible data, and unauthorized capabilities to update, insert, or delete certain OPERA 5 data. Additionally, this vulnerability allows for a partial denial-of-service condition on Oracle Hospitality OPERA 5.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive data, complete access to all data within Oracle Hospitality OPERA 5, unauthorized modifications to some OPERA 5 data, and a partial denial-of-service condition on the application.