Read the docs

BlackBerry

Records90All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high29CVSS 7.0–8.9

Exploited now

BlackBerry records in CISA KEV
TI-2020-01862 Apache Tomcat Improper Privilege Management Vulnerability Priority CRITICAL 100KEV 2022-03-03TI-2020-09350 SaltStack Salt Path Traversal Vulnerability Priority CRITICAL 86KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Qnx Software Development Platform 21 records MEDIUM Unified Endpoint Manager 9 records LOW Enterprise Server 8 records MEDIUM Athoc 7 records LOW Blackberry Enterprise Service 5 records MEDIUM Blackberry Os 4 records MEDIUM Qnx Neutrino Rtos 4 records MEDIUM Unified Endpoint Management 4 records LOW

Records

4 records in Unified Endpoint Management · all components

TI-2019-06490 CVE-2019-8999 · GHSA-qxhf-xwcg-8fxp

XML external entity injection in BlackBerry UEM

Priority LOW 36

An XML External Entity vulnerability in the UEM Core of BlackBerry UEM version(s) earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01488 Published 2019-04-18 No fix listed CWE-611
TI-2021-05143 CVE-2021-22153 · GHSA-p5px-xx74-cwjx

A Remote Code Execution vulnerability in the Management Console component of BlackBerry…

Priority LOW 34

A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially cause the spreadsheet app…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00964 Published 2021-05-13 No fix listed CWE-1236
TI-2021-05142 CVE-2021-22152 · GHSA-hv9q-h9ff-9wxj

A Denial of Service due to Improper Input Validation vulnerability in the Management…

Priority LOW 24

A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentia…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00219 Published 2021-05-13 No fix listed CWE-20
Open these records in search →