https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T21:22:13.291697+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-14204 CVE-2020-14204 2026-10-06T21:22:13.308382+00:00

In WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibi_apps/WFServlet.cfg because XML external entity injection is possible. This is related to making changes to the application repository configuration.