ibi

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

ibi records in CISA KEV

No ibi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Webfocus Business Intelligence 3 records LOW

Records

3 records in Webfocus Business Intelligence · all components

TI-2020-11125 CVE-2020-14204 · GHSA-2r5q-g9p8-3977

In WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote…

LOW 39

In WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibi_apps/WFServlet.cfg becaus…

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01912 Published 2020-06-22 No fix listed CWE-611

TI-2020-11124 CVE-2020-14203 · GHSA-9w7x-25jx-989f

WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF)…

LOW 39

WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users within the /ibi_apps/WFServlet(.ibfs) endpoint.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00485 Published 2020-06-22 No fix listed CWE-352

TI-2020-11123 CVE-2020-14202 · GHSA-rgpr-wc55-wphr

WebFOCUS Business Intelligence 8.0 (SP6) was prone to XSS via arbitrary URL parameters.

LOW 28

WebFOCUS Business Intelligence 8.0 (SP6) was prone to XSS via arbitrary URL parameters.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00668 Published 2020-06-22 No fix listed CWE-79

Open these records in search →

Critical	1
High	2
Medium	1
Low	0
No CVSS	0