CVE-2020-19586: Yellowfinbi Business Intelligence

Critical severity, CVSS 9.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI.

Affected products

• Yellowfinbi Business Intelligence: version 7.3 only

Published 2022-09-14. Last modified 2026-06-17.