- Vendor / Project
- Oracle
- Product
- Intelligence Enterprise Edition
- Date added
- Jan 18, 2022
- Due date
- Jul 18, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-22
Description
Path traversal vulnerability, where an attacker can target the preview FilePath parameter of the getPreviewImage function to get access to arbitrary system file.
Required action
Apply updates per vendor instructions.