Vulnerabilities

TI-2025-10583 CVE-2025-11548 · GHSA-3vpg-qj28-69px

ibi WebFOCUS - Unauthenticated RCE Vulnerability

MEDIUM 49

A remote, unauthenticated privilege escalation in ibi WebFOCUS allows an attacker to gain administrative access to the application which may lead to unauthenticated Remote Code Execution

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00523 Published 2025-10-14 No fix listed CWE-94

TI-2020-11123 CVE-2020-14202 · GHSA-rgpr-wc55-wphr

WebFOCUS Business Intelligence 8.0 (SP6) was prone to XSS via arbitrary URL parameters.

LOW 28

WebFOCUS Business Intelligence 8.0 (SP6) was prone to XSS via arbitrary URL parameters.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00668 Published 2020-06-22 No fix listed CWE-79

TI-2020-11125 CVE-2020-14204 · GHSA-2r5q-g9p8-3977

In WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote…

LOW 39

In WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibi_apps/WFServlet.cfg becaus…

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01912 Published 2020-06-22 No fix listed CWE-611

TI-2020-11124 CVE-2020-14203 · GHSA-9w7x-25jx-989f

WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF)…

LOW 39

WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users within the /ibi_apps/WFServlet(.ibfs) endpoint.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00485 Published 2020-06-22 No fix listed CWE-352

Vulnerabilities

Filters

ibi WebFOCUS - Unauthenticated RCE Vulnerability

WebFOCUS Business Intelligence 8.0 (SP6) was prone to XSS via arbitrary URL parameters.

In WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote…

WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF)…