Lucene search
China National Vulnerability DatabaseCNVD-2021-99269HistoryOct 15, 2021 - 12:00 a.m.
Yellowfin insecure direct object reference vulnerability
2021-10-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
0.006 Low
EPSS
Percentile
78.1%
An insecure direct object reference vulnerability exists in versions of Yellowfin prior to 9.6.1, a business intelligence automated analytics, cross-vendor narrative and collaboration software suite. An attacker could exploit the vulnerability by sending a specially crafted HTTP GET request to the page “MIImage.i4” to enumerate and download an uploaded image.
| CPE | Name | Operator | Version |
|---|---|---|---|
| yellowfin yellowfin | lt | 9.6.1 |
Related
prion
prion
Design/Logic Flaw
2021-10-14 19:15:00
nvd
nvd
CVE-2021-36389
2021-10-14 19:15:09
cve
cve
CVE-2021-36389
2021-10-14 19:15:09
cvelist
cvelist
CVE-2021-36389
2021-10-14 18:27:27
zdt
zdt
packetstorm
packetstorm
Yellowfin Cross Site Scripting / Insecure Direct Object Reference
2021-10-14 00:00:00