Threats affecting pkg:maven/com.oracle.hospitality/opera5-property-services

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2026-34311Oracle Hospitality OPERA 5 Property Services · Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to Critical9.8EPSS 0.5%2026-05-28CVE Database V5CVE-2026-34311 Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). Supported versions that are affected are 5.6.19.24, 5.6.22, 5.6.25.19, 5.6.27.6 and 5.6.28. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality OPERA 5 Property Services. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). EPSS 0.5%Vulnerability	CVE Database V5	2026-05-28
Medium	6.1	EPSS 0.2%	CVE-2026-21966 · Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hospitality OPERA 5 Property Services, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hospitality OPERA 5 Property Services accessible data as well as unauthorized read access to a subset of Oracle Hospitality OPERA 5 Property Services accessible data. Medium6.1EPSS 0.2%2026-01-20CVE Database V5 CVE-2026-21966 is a medium-severity vulnerability in Oracle Hospitality OPERA 5 Property Services versions 5.6.19.23, 5.6.25.17, 5.6.26.10, and 5. EPSS 0.2%Vulnerability	CVE Database V5	2026-01-20

Page 1 of 1