Known Exploited Vulnerabilities January 18, 2022 · CISA KEV Catalog

CVE-2020-14864: Oracle Business Intelligence Enterprise Edition Path Transversal

Path traversal vulnerability, where an attacker can target the preview FilePath parameter of the getPreviewImage function to get access to arbitrary system file.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-14864 Oracle
Related: CVE-2026-21962: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Known Exploited Vulnerabilities · Aug 24, 2026
CVE-2026-46817: Oracle E-Business Suite Improper Privilege Management Vulnerability Known Exploited Vulnerabilities · Jul 15, 2026
CVE-2026-35273: Oracle People Soft Enterprise People Tools Missing Authentication for Critical Function Vulnerability Known Exploited Vulnerabilities · Jun 12, 2026