CVE-2020-19586
Published Sep 14, 2022Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI.
Vendor archive
yellowfinbi CVEs
Beta · best-effort5 CVEs tagged to vendor yellowfinbi — 1 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2021-36389
Published Oct 14, 2021In Yellowfin before 9.6.1 it is possible to enumerate and download uploaded images through an Insecure Direct Object Reference vulnerability exploitable by sending a specially cra…
CVE-2021-36388
Published Oct 14, 2021In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Object Reference vulnerability exploitable by sending a specia…
CVE-2021-36387
Published Oct 14, 2021In Yellowfin before 9.6.1 there is a Stored Cross-Site Scripting vulnerability in the video embed functionality exploitable through a specially crafted HTTP POST request to the pa…
CVE-2019-1010147
Published Jul 26, 2019Yellowfin Smart Reporting All Versions Prior to 7.3 is affected by: Incorrect Access Control - Privileges Escalation. The impact is: Victim attacked and access admin functionality…
Showing 1-5 of 5 CVEsPage 1 of 1