Back to CVE Browser

CVE-2020-14864

🔥 Known Exploited (CISA KEV)HIGH

7.5

CVSS Severity Score

EPSS Score78.2520%

EPSS Percentile87.67th

Published2020-10-21

Last Modified2025-10-27

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation). Supported versions that are affected are 5.5.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Affected Platforms (CPE)

📦

Oracle

Business Intelligence

= 5.5.0.0.0= 12.2.1.3.0= 12.2.1.4.0

References & Advisories

🔗 http://packetstormsecurity.com/files/159748/Oracle-Business-Intelligence-Enterprise-Edition-5.5.0.0.0-12.2.1.3.0-12.2.1.4.0-LFI.html

🔗 https://www.oracle.com/security-alerts/cpuoct2020.html

🔗 http://packetstormsecurity.com/files/159748/Oracle-Business-Intelligence-Enterprise-Edition-5.5.0.0.0-12.2.1.3.0-12.2.1.4.0-LFI.html

🔗 https://www.oracle.com/security-alerts/cpuoct2020.html

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-14864

Related Security Intelligence Articles

Daily Global Cyber Threat Intelligence Digest — July 23, 2026

Key threat updates including CISA's KEV addition of Langflow CVE-2026-0770 remote code execution, unauthenticated path traversal in Windmill CVE-2026-29059, and ongoing incident response guidance for SonicWall SMA1000 zero-day exposures.

Daily Global Cyber Threat Intelligence Digest — July 21, 2026

Comprehensive breakdown of critical vulnerability advisories across VMware vCenter, F5 BIG-IP, and GitLab platforms, alongside threat actor reconnaissance trends and ransomware response strategies.

Related Vulnerabilities

CVE-2026-127038.0

TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated atta...

CVE-2026-506417.1

Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database This issue was fixed in version 6...

CVE-2026-632424.3

A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed ...

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: correct drop logic for malformed AMPDU frames T...