CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-10-21
Oracle Business Intelligence Enterprise Edition (OBIEE) Directory Traversal & Local File Inclusion (LFI) Vulnerability (CVE-2020-14864) Analysis and Mitigation Guide
[Affected Scope] Oracle Business Intelligence Enterprise Edition (OBIEE) versions 5.5.0.0.0, 12.2.1.3.0, and 12.2.1.4.0
[Impact] Unauthenticated remote attackers can access sensitive system files and configuration data via crafted HTTP requests
[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or implement path traversal blocking rules on Web Application Firewalls (WAF)