CVE-2020-19587: Idera Yellowfin Business Intelligence

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI.

Affected products

• Idera Yellowfin Business Intelligence: version 7.3 only

Published 2022-09-14. Last modified 2026-06-17.