Read the docs
TI-2026-14886 Aliases CVE-2026-18084GHSA-324m-xxrv-v73q

Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM

Priority LOW 39CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Active
Attack complexity
Low
Attack requirements
None
Impact type
Cross-site scripting
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting (XSS). This issue affects UEM: 12.23.0 QF8 or earlier.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00253 16th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BlackBerryUEM12.23.0 QF8 and earlier, 12.22.1 QF7 and earlier and later—No fix listedCNA
  • UEM VendorBlackBerry Affected 12.23.0 QF8 and earlier, 12.22.1 QF7 and earlier and later Fixed in — No fix listed CNA

CPE configurations NVD · 17

CPEVersionsRoleVendor
cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:-:*:*:*:*:*:*12.23.0VulnerableBlackBerry
cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix1:*:*:*:*:*:*12.23.0 quick_fix1VulnerableBlackBerry
cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix2:*:*:*:*:*:*12.23.0 quick_fix2VulnerableBlackBerry
cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix3:*:*:*:*:*:*12.23.0 quick_fix3VulnerableBlackBerry
cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix4:*:*:*:*:*:*12.23.0 quick_fix4VulnerableBlackBerry
cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix5:*:*:*:*:*:*12.23.0 quick_fix5VulnerableBlackBerry
cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix6:*:*:*:*:*:*12.23.0 quick_fix6VulnerableBlackBerry
cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix7:*:*:*:*:*:*12.23.0 quick_fix7VulnerableBlackBerry
cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix8:*:*:*:*:*:*12.23.0 quick_fix8VulnerableBlackBerry
cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:-:*:*:*:*:*:*12.22.1VulnerableBlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:-:*:*:*:*:*:* Versions 12.23.0 Vulnerable ·BlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix1:*:*:*:*:*:* Versions 12.23.0 quick_fix1 Vulnerable ·BlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix2:*:*:*:*:*:* Versions 12.23.0 quick_fix2 Vulnerable ·BlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix3:*:*:*:*:*:* Versions 12.23.0 quick_fix3 Vulnerable ·BlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix4:*:*:*:*:*:* Versions 12.23.0 quick_fix4 Vulnerable ·BlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix5:*:*:*:*:*:* Versions 12.23.0 quick_fix5 Vulnerable ·BlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix6:*:*:*:*:*:* Versions 12.23.0 quick_fix6 Vulnerable ·BlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix7:*:*:*:*:*:* Versions 12.23.0 quick_fix7 Vulnerable ·BlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0:quick_fix8:*:*:*:*:*:* Versions 12.23.0 quick_fix8 Vulnerable ·BlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:-:*:*:*:*:*:* Versions 12.22.1 Vulnerable ·BlackBerry
Show 7 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix1:*:*:*:*:*:*12.22.1 quick_fix1VulnerableBlackBerry
cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix2:*:*:*:*:*:*12.22.1 quick_fix2VulnerableBlackBerry
cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix3:*:*:*:*:*:*12.22.1 quick_fix3VulnerableBlackBerry
cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix4:*:*:*:*:*:*12.22.1 quick_fix4VulnerableBlackBerry
cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix5:*:*:*:*:*:*12.22.1 quick_fix5VulnerableBlackBerry
cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix6:*:*:*:*:*:*12.22.1 quick_fix6VulnerableBlackBerry
cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix7:*:*:*:*:*:*12.22.1 quick_fix7VulnerableBlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix1:*:*:*:*:*:* Versions 12.22.1 quick_fix1 Vulnerable ·BlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix2:*:*:*:*:*:* Versions 12.22.1 quick_fix2 Vulnerable ·BlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix3:*:*:*:*:*:* Versions 12.22.1 quick_fix3 Vulnerable ·BlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix4:*:*:*:*:*:* Versions 12.22.1 quick_fix4 Vulnerable ·BlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix5:*:*:*:*:*:* Versions 12.22.1 quick_fix5 Vulnerable ·BlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix6:*:*:*:*:*:* Versions 12.22.1 quick_fix6 Vulnerable ·BlackBerry
  • cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1:quick_fix7:*:*:*:*:*:* Versions 12.22.1 quick_fix7 Vulnerable ·BlackBerry

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-18084
  2. 2026-10-03 Alias added: GHSA-324m-xxrv-v73q

References

Advisory 1

  • TI-2018-06429 Information disclosure in BlackBerry UEM CVSS 3.1HIGH 7.5
  • TI-2018-06431 Cross-site request forgery in BlackBerry UEM CVSS 3.0MEDIUM 6.5
  • TI-2017-12743 Cross-site scripting in BlackBerry UEM Management Console CVSS 3.0MEDIUM 6.1
  • TI-2017-02990 Cross-site scripting in BlackBerry Unified Endpoint Manager CVSS 3.0MEDIUM 6.1
  • TI-2026-14887 Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM CVSS 4.0MEDIUM 5.9
  • TI-2020-05596 Improper input validation in BlackBerry UEM CVSS 3.1MEDIUM 5.5
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences