CVE-2020-14203

2020-06-2212:47:06

mitre

www.cve.org

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

44.9%

JSON

WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users within the /ibi_apps/WFServlet(.ibfs) endpoint. The impact may be creation of an administrative user. It can also be exploited in conjunction with CVE-2016-9044.

References

www.hooperlabs.xyz/disclosures/webfocus.php