CVE-2020-14203

2020-06-2212:47:06

mitre

www.cve.org

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.0%

JSON

WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users within the /ibi_apps/WFServlet(.ibfs) endpoint. The impact may be creation of an administrative user. It can also be exploited in conjunction with CVE-2016-9044.

References

www.hooperlabs.xyz/disclosures/webfocus.php