CVE-2018-3014: oracle corporation hospitality opera 5 property services
Vulnerability summary
CVE-2018-3014 is a medium (CVSS 6.5) vulnerability in oracle corporation hospitality opera 5 property services. EPSS estimates a 2.01% chance of exploitation in the next 30 days, higher than 80.5% of scored vulnerabilities.
Timeline
- 18-07-2018PublishedVulnerability first disclosed.
- 02-10-2024Last modifiedVulnerability information updated.
Description
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Reports). The supported version that is affected is 5.5.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.01%
Chance of exploitation in the next 30 days
Percentile
81%
Versus all other CVEs
30-day change
-0.03 pp
From 2.03% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Oracle1 product
- hospitality_opera_property_management5.5 | 5.5.1
Oracle corporation1 product
- hospitality opera 5 property services≥ 5.5.0, < 5.6.0
2 vendors · 2 products
References
3 links- www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlX Refsource CONFIRMPatchVendor Advisory