CVE-2020-19587

2022-09-1402:54:44

mitre

www.cve.org

cross site scripting

yellowfin business intelligence

remote attackers

arbitrary code

configmap parameters

miadminstyles.

EPSS

0.001

Percentile

24.8%

JSON

Cross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI.

References

github.com/Deepak983/CVE-2020-19587/blob/main/_Stored%20XSS%20in%20MIAdminStyles.i4%20through%20privileges%20escalation.pdf

www.linkedin.com/in/deepak-sharma-72a044b4/

EPSS

0.001

Percentile

24.8%

JSON

Related for CVELIST:CVE-2020-19587