Approved changes feed: RSS · Atom

cpe:2.3:a:yellowfinbi:yellowfin:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorYellowfinbi (1184ddd3-6763-55bd-97b9-4b07c1187b49)
ProductYellowfin (09d9717d-e4ec-5f49-981d-143b6925f4f3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-36387 vulnerable 2026-06-08 05:32:52.187630 Details available
In Yellowfin before 9.6.1 there is a Stored Cross-Site Scripting vulnerability in the video embed functionality exploitable through a specially crafted HTTP POST request to the page "ActivityStreamAjax.i4".
Published: 2021-10-14T18:01:38.000Z
Updated: 2024-08-04T00:54:51.437Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.