Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

18 records

Priority LOW 33

The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote authenticated users to log into arbitrary user a…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02104 Published 2011-10-21 No fix listed CWE-264
Priority LOW 24

Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, an…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01931 Published 2011-04-18 No fix listed CWE-79
Priority MEDIUM 49

Multiple buffer overflows in the PDF Distiller in the BlackBerry Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server 4.1.3 through 5.0.2, and Enterprise Server Express 5.0.1 and 5.0.2, a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05718 Published 2011-01-12 No fix listed CWE-119
Priority LOW 26

Cross-site scripting (XSS) vulnerability in the "Customize Statistics Page" (admin/statistics/ConfigureStatistics) in the MDS Connection Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) before 4.1.6…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03493 Published 2009-04-22 No fix listed CWE-79
Priority LOW 39

Buffer overflow in the decompression algorithm in Research in Motion BlackBerry Enterprise Server 4.0 SP1 and earlier before 20050607 might allow remote attackers to execute arbitrary code via certain data packets.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03246 Published 2007-06-29 No fix listed CWE-119
Priority MEDIUM 46

Research in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation of arbitrary third-party applications on BlackBerry devices, which might facilitate loading of malware…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01446 Published 2007-06-28 No fix listed
Priority LOW 28

The BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.0 to version 4.0 Service Pack 2 allows attackers to cause a denial of service via a malformed Portable Network Graphics (…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02453 Published 2006-01-09 No fix listed CWE-119