VULNERABILITY INTELLIGENCE

CVE-2020-14203

CVSS score8.8 HIGH

EPSS probability0.48%

CISA KEVNot currently listed

Published2020-06-22

Last modified2026-06-17

Description

WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users within the /ibi_apps/WFServlet(.ibfs) endpoint. The impact may be creation of an administrative user. It can also be exploited in conjunction with CVE-2016-9044.