Description
Path traversal vulnerability, where an attacker can target the preview FilePath parameter of the getPreviewImage function to get access to arbitrary system file.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Business Intelligence Enterprise Edition | Oracle Corporation / Business Intelligence Enterprise Edition | 12.2.1.3.0 | affected |
| Business Intelligence Enterprise Edition | Oracle Corporation / Business Intelligence Enterprise Edition | 12.2.1.4.0 | affected |
| Business Intelligence Enterprise Edition | Oracle Corporation / Business Intelligence Enterprise Edition | 5.5.0.0.0 | affected |