Approved changes feed: RSS · Atom
cpe:2.3:a:yellowfinbi:yellowfin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Yellowfinbi (1184ddd3-6763-55bd-97b9-4b07c1187b49) |
|---|---|
| Product | Yellowfin (09d9717d-e4ec-5f49-981d-143b6925f4f3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-36389 |
vulnerable | 2026-06-08 05:32:52.189723 |
Details available
In Yellowfin before 9.6.1 it is possible to enumerate and download uploaded images through an Insecure Direct Object Reference vulnerability exploitable by sending a specially crafted HTTP GET request to the page "MIImage.i4".
Published: 2021-10-14T18:27:27.000Z
Updated: 2024-08-04T00:54:51.619Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36388 |
vulnerable | 2026-06-08 05:32:52.189389 |
Details available
In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Object Reference vulnerability exploitable by sending a specially crafted HTTP GET request to the page "MIIAvatarImage.i4".
Published: 2021-10-14T18:16:25.000Z
Updated: 2024-08-04T00:54:51.531Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36387 |
vulnerable | 2026-06-08 05:32:52.188860 |
Details available
In Yellowfin before 9.6.1 there is a Stored Cross-Site Scripting vulnerability in the video embed functionality exploitable through a specially crafted HTTP POST request to the page "ActivityStreamAjax.i4".
Published: 2021-10-14T18:01:38.000Z
Updated: 2024-08-04T00:54:51.437Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.