ibi WebFOCUS Business Intelligence (BI) 8.0 Service Pack 6
Approved changes feed: RSS · Atom
cpe:2.3:a:ibi:webfocus_business_intelligence:8.0:sp6:*:*:*:*:*:*
part: a version: 8.0 update: sp6
| Vendor | Ibi (03a49a22-8527-5ffd-9d77-f40e1a328028) |
|---|---|
| Product | Webfocus Business Intelligence (4df4bd59-4dbe-5f25-8890-14b5ffa3d5b3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-14204 |
vulnerable | 2026-06-08 05:19:22.699505 |
Details available
In WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibi_apps/WFServlet.cfg because XML external entity injection is possible. This is related to making changes to the application repository configuration.
Published: 2020-06-22T12:47:07.000Z
Updated: 2024-08-04T12:39:36.191Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14203 |
vulnerable | 2026-06-08 05:19:22.699079 |
Details available
WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users within the /ibi_apps/WFServlet(.ibfs) endpoint. The impact may be creation of an administrative user. It can also be exploited in conjunction with CVE-2016-9044.
Published: 2020-06-22T12:47:06.000Z
Updated: 2024-08-04T12:39:36.437Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14202 |
vulnerable | 2026-06-08 05:19:22.698565 |
Details available
WebFOCUS Business Intelligence 8.0 (SP6) was prone to XSS via arbitrary URL parameters.
Published: 2020-06-22T12:47:09.000Z
Updated: 2024-08-04T12:39:36.208Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.