BlackBerry

Records90All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical12CVSS 9.0–10.0

CVSS high29CVSS 7.0–8.9

Exploited now

BlackBerry records in CISA KEV

TI-2020-01862 Apache Tomcat Improper Privilege Management Vulnerability CRITICAL 100KEV 2022-03-03 TI-2020-09350 SaltStack Salt Path Traversal Vulnerability CRITICAL 86KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Qnx Software Development Platform 21 records MEDIUM Unified Endpoint Manager 9 records LOW Enterprise Server 8 records MEDIUM Athoc 7 records LOW Blackberry Enterprise Service 5 records MEDIUM Blackberry Os 4 records MEDIUM Qnx Neutrino Rtos 4 records MEDIUM Unified Endpoint Management 4 records LOW

Records

8 records in Enterprise Server · all components

TI-2008-03108 CVE-2008-3246 · GHSA-8m46-fv52-2gq6

Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment…

MEDIUM 50

Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise Server 4.1 SP3 (4.1.3) through 4.1 SP5 (4.1.5)…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06876 Published 2008-07-21 No fix listed CWE-94

TI-2016-02620 CVE-2016-3126 · GHSA-g38c-c493-9wm4

Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry…

LOW 29

Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01018 Published 2016-04-22 No fix listed CWE-79

TI-2016-01756 CVE-2016-1918 · GHSA-8cqc-2w6c-cq7q

Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry…

LOW 29

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01018 Published 2016-04-22 No fix listed CWE-79

TI-2016-01755 CVE-2016-1917 · GHSA-pph4-2xr5-6f8j

Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry…

LOW 29

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01018 Published 2016-04-22 No fix listed CWE-79

TI-2016-01754 CVE-2016-1916 · GHSA-72qv-hrmw-wrcv

Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry…

LOW 26

Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic admin…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00802 Published 2016-04-22 No fix listed CWE-79

TI-2014-01126 CVE-2014-1467 · GHSA-xx52-g2px-mxcx

BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise…

LOW 25

BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise Server Express for Exchange through 5.0.4, Enterprise Server for Domino through 5…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01257 Published 2014-02-14 No fix listed CWE-255

TI-2014-01127 CVE-2014-1469 · GHSA-wgff-69m6-m267

BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before…

LOW 23

BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext credentials during exception handling, which allows local users to obtain sensitive information by reading the exc…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.0038 Published 2014-08-18 No fix listed CWE-310

TI-2015-03456 CVE-2015-4112 · GHSA-4h87-mj85-vv8r

The Management Console in BlackBerry Enterprise Server (BES) 12 before 12.2 does not…

LOW 22

The Management Console in BlackBerry Enterprise Server (BES) 12 before 12.2 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web s…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01124 Published 2015-11-19 No fix listed CWE-254

Open these records in search →