Login Request a demo
YE
Product
Yellowfin
by Yellowfinbi · last CVE Oct 14, 2021
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 2Medium 1Low 0
Severity
All severities3Critical0High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Yellowfin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-36389
7.5
3%
Oct 14
In Yellowfin before 9.6.1 it is possible to enumerate and download uploaded images through an Insecure Direct Object Reference vulnerability exploitable by sending a specially…
Affected: before 9.6.1
CVE-2021-36388
7.5
3%
Oct 14
In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Object Reference vulnerability exploitable by sending a…
Affected: before 9.6.1
Showing 2