CVE-2020-14864 — Oracle Business Intelligence Enterprise Edition Path Transversal

CISA KEV listed Added January 18, 2022 Remediate by July 18, 2022

Description

Path traversal vulnerability, where an attacker can target the preview FilePath parameter of the getPreviewImage function to get access to arbitrary system file.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-14864

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer