Description
Oracle Business Intelligence Enterprise Edition 5.5.0.0.0、12.2.1.3.0和12.2.1.4.0版本中存在本地文件包含漏洞，此漏洞是由于在处理用户提供的数据时缺少输入验证。
Oracle Business Intelligence Enterprise Edition CVE-2020-14864本地文件包含漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2020-14864
http://packetstormsecurity.com/files/159748/Oracle-Business-Intelligence-Enterprise-Edition-5.5.0.0.0-12.2.1.3.0-12.2.1.4.0-LFI.html
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-14864
https://www.oracle.com/security-alerts/cpuoct2020.html
https://www.exploit-db.com/exploits/48964
https://www.sentinelone.com/vulnerability-database/cve-2020-14864/
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14864.yaml
https://www.cvedetails.com/cve/CVE-2020-14864/
https://cipherssecurity.com/cve/CVE-2020-14864/
https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=33002
https://www.nsfocus.net/vulndb/50547
https://stack.chaitin.com/vuldb/detail/56756d49-5f32-4982-8ef2-0893f918dbe1
https://www.tenablecloud.cn/plugins/nessus/175282
https://www.precogs.ai/vulnerability/cve-2020-14864-vulnerability-oracle-business-intelligence
https://cyberflow.beyazhacker.com/cve/cve-2020-14864-oracle-business-intelligence-enterprise-edition-path-transversal
https://unit42.paloaltonetworks.com/network-attack-trends-winter-2020/