CVE-2023-22087
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-22087
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Vulnerability in the Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). The supported version that is affected is 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in takeover of Hospitality OPERA 5 Property Services. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Oracle Hospitality Applications 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Oracle Hospitality Applications是美国甲骨文（Oracle）公司的一套用于酒店管理的业务应用程序、服务器和存储解决方案。该产品提供人力资源成本管理、提供客户整个旅途中服务的跟踪管理来提高客户满意度等功能。 Oracle Hospitality Applications 的 Hospitality OPERA 5 Property Services 5.6 版本存在安全漏洞，该漏洞源于允许低权限攻击者通过 HTTP 进行网络访问以危害 Hospitality OPERA 5 P
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Oracle Corporation | Hospitality OPERA 5 Property Services | 5.6 | - |
II. Public POCs for CVE-2023-22087
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-22087
请登录查看更多情报信息。
Same Patch Batch · Oracle Corporation · 2023-10-17 · 73 CVEs total
| CVE-2023-22089 | 9.8 CRITICAL | Oracle Fusion Middleware 安全漏洞 |
| CVE-2023-22069 | 9.8 CRITICAL | Oracle Fusion Middleware 安全漏洞 |
| CVE-2023-22072 | 9.8 CRITICAL | Oracle Fusion Middleware 安全漏洞 |
| CVE-2023-22085 | 8.8 HIGH | Oracle Hospitality Applications 安全漏洞 |
| CVE-2023-22102 | 8.3 HIGH | Oracle MySQL 安全漏洞 |
| CVE-2023-22099 | 8.2 HIGH | Oracle Virtualization 安全漏洞 |
| CVE-2023-22098 | 8.2 HIGH | Oracle Virtualization 安全漏洞 |
| CVE-2023-22101 | 8.1 HIGH | Oracle Fusion Middleware 安全漏洞 |
| CVE-2023-22094 | 7.9 HIGH | Oracle MySQL 安全漏洞 |
| CVE-2023-22100 | 7.9 HIGH | Oracle Virtualization 安全漏洞 |
| CVE-2023-22086 | 7.5 HIGH | Oracle Fusion Middleware 安全漏洞 |
| CVE-2023-22019 | 7.5 HIGH | Oracle Fusion Middleware 安全漏洞 |
| CVE-2023-22108 | 7.5 HIGH | Oracle Fusion Middleware 安全漏洞 |
| CVE-2023-22059 | 6.5 MEDIUM | Oracle MySQL 安全漏洞 |
| CVE-2023-22106 | 6.5 MEDIUM | Oracle E-Business Suite 安全漏洞 |
| CVE-2023-22118 | 6.5 MEDIUM | Oracle Financial Services Applications 安全漏洞 |
| CVE-2023-22090 | 6.5 MEDIUM | Oracle PeopleSoft Enterprise CC Common Application Objects 安全漏洞 |
| CVE-2023-22093 | 6.5 MEDIUM | Oracle E-Business Suite 安全漏洞 |
| CVE-2023-22079 | 6.5 MEDIUM | Oracle MySQL 安全漏洞 |
| CVE-2023-22095 | 6.5 MEDIUM | Oracle MySQL Server 安全漏洞 |
Showing top 20 of 73 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Hospitality OPERA 5 Property Services
V. Comments for CVE-2023-22087
No comments yet