CVE-2018-2956: oracle corporation hospitality opera 5 property services
Vulnerability summary
CVE-2018-2956 is a high (CVSS 8.1) vulnerability in oracle corporation hospitality opera 5 property services. EPSS estimates a 0.45% chance of exploitation in the next 30 days, higher than 37.5% of scored vulnerabilities.
Timeline
- 18-07-2018PublishedVulnerability first disclosed.
- 02-10-2024Last modifiedVulnerability information updated.
Description
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Integration). The supported version that is affected is 5.5.x. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality OPERA 5 Property Services executes to compromise Oracle Hospitality OPERA 5 Property Services. While the vulnerability is in Oracle Hospitality OPERA 5 Property Services, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality OPERA 5 Property Services. CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.45%
Chance of exploitation in the next 30 days
Percentile
38%
Versus all other CVEs
30-day change
0.00 pp
From 0.45% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Oracle1 product
- hospitality_opera_property_management5.5 | 5.5.1
Oracle corporation1 product
- hospitality opera 5 property services≥ 5.5.0, < 5.6.0
2 vendors · 2 products
References
3 links- www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlX Refsource CONFIRMPatchVendor Advisory