Yellowfinbi Yellowfin
3 CVEs affecting Yellowfinbi Yellowfin. Latest disclosed: 2021-10-14. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-36389 | High | 7.5 | 2021-10-14 | In Yellowfin before 9.6.1 it is possible to enumerate and download uploaded images through an Insecure Direct Object Reference vulnerability exploitable by sen… |
CVE-2021-36388 | High | 7.5 | 2021-10-14 | In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Object Reference vulnerability exploitable… |
CVE-2021-36387 | Medium | 5.4 | 2021-10-14 | In Yellowfin before 9.6.1 there is a Stored Cross-Site Scripting vulnerability in the video embed functionality exploitable through a specially crafted HTTP PO… |