YE
Vendor
Yellowfinbi
5
CVEs
0
On KEV
0
New 30D
Products
YE7.5
Yellowfin
Yellowfinbi
3 CVEs0 on KEV0 new
BI9.0
Business Intelligence
Yellowfinbi
1 CVEs0 on KEV0 new
YB5.4
Yellowfin BI
Yellowfinbi
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2020-19586 | BI Business Intelligence Yellowfinbi | 9.0 | Sep 14 | Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI |
| CVE-2021-36389 | YE Yellowfin Yellowfinbi | 7.5 | Oct 14 | In Yellowfin before 9.6.1 it is possible to enumerate and download uploaded images through an Insecure Direct Object Reference vulnerability exploitable by sending a specially… |
| CVE-2021-36388 | YE Yellowfin Yellowfinbi | 7.5 | Oct 14 | In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Object Reference vulnerability exploitable by sending a… |
| CVE-2021-36387 | YE Yellowfin Yellowfinbi | 5.4 | Oct 14 | In Yellowfin before 9.6.1 there is a Stored Cross-Site Scripting vulnerability in the video embed functionality exploitable through a specially crafted HTTP POST request to the… |
| CVE-2019-1010147 | YB Yellowfin BI Yellowfinbi | 5.4 | Jul 26 | Yellowfin Smart Reporting All Versions Prior to 7.3 is affected by: Incorrect Access Control - Privileges Escalation |