CVE-2020-14815 is an easily exploitable vulnerability in Oracle Business Intelligence Enterprise Edition (OBIEE) versions 5.5.0.0.0, 12.2.1.3.0, and 12.2.1.4.0, specifically within the Analytics Actions component. It carries a high CVSS v3.1 base score of 8.2, indicating significant risk. An unauthenticated attacker can compromise OBIEE via HTTP network access, requiring human interaction from a non-attacker to succeed. Successful exploitation can lead to unauthorized access to critical data, complete access to all OBIEE accessible data, and unauthorized modification of some data, potentially impacting additional products beyond OBIEE. There is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed in CISA's KEV catalog, nor is there any community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
5.5.0.0.0CPE matchmatch criteria | cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:* | ||
12.2.1.3.0CPE matchmatch criteria | cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:* | ||
12.2.1.4.0CPE matchmatch criteria | cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.