CVE-2020-14864

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation). Supported versions that are affected are 5.5.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Affected

Oracle Corporation · Business Intelligence Enterprise Edition

CVSS v3.1 ORACLE

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0 NVD

7.8 HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N

EPSS

97.23% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2022-01-18

Nuclei

high · CWE-22

Published

2020-10-21

Updated

2026-01-12

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14864.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/48964

Security advisories

• https://www.oracle.com/security-alerts/cpuoct2020.html
• http://packetstormsecurity.com/files/159748/Oracle-Business-Intelligence-Enterprise-Editi…

References

• CVE Record
• NVD entry