TI-2020-11123 CVE-2020-14202 · GHSA-rgpr-wc55-wphr
WebFOCUS Business Intelligence 8.0 (SP6) was prone to XSS via arbitrary URL parameters.
Priority LOW 28
WebFOCUS Business Intelligence 8.0 (SP6) was prone to XSS via arbitrary URL parameters.
Vulnerabilities
3 records
TI-2020-11125 CVE-2020-14204 · GHSA-2r5q-g9p8-3977
In WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote…
Priority LOW 39
In WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibi_apps/WFServlet.cfg becaus…
TI-2020-11124 CVE-2020-14203 · GHSA-9w7x-25jx-989f
WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF)…
Priority LOW 39
WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users within the /ibi_apps/WFServlet(.ibfs) endpoint.