CVE-2020-14879

CVE-2020-14879 is a high-severity vulnerability in Oracle BI Publisher, specifically affecting versions 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0 of the E-Business Suite - XDO component. This easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise BI Publisher. Successful exploitation can lead to unauthorized access to critical data, complete access to all BI Publisher accessible data, and unauthorized modification of some accessible data. The vulnerability has a CVSS 3.1 Base Score of 8.5 (High), indicating significant confidentiality and integrity impacts. Its attack vector is network-based with low attack complexity, requiring no user interaction. While the vulnerability is in BI Publisher, successful attacks may significantly impact additional products within the Oracle Fusion Middleware environment. There is currently no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered widespread attention.