CVE-2020-14864 Oracle Intelligence Enterprise Edition
Path traversal vulnerability, where an attacker can target the preview FilePath parameter of the getPreviewImage function to get access to arbitrary system file.
- CVSS
- not scored
On CISA’s exploited list
Oracle Business Intelligence Enterprise Edition Path Transversal
- Added
- 2022-01-18
- Federal patch deadline
- 2022-07-18
- Ransomware use
- not known