Vulnerabilities

TI-2016-01753 CVE-2016-1915 · GHSA-gpfm-pjr3-xq7q

Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to inject arbitrary web script or HTML via the locale parameter to (1) mydevi…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0395 Published 2017-04-13 No fix listed CWE-79

TI-2016-01752 CVE-2016-1914 · GHSA-wq8m-8gjc-mm8w

Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet…

MEDIUM 45

Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to execute arbitrary SQL commands via th…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.04099 Published 2017-04-13 No fix listed CWE-89

TI-2014-01127 CVE-2014-1469 · GHSA-wgff-69m6-m267

BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before…

LOW 23

BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext credentials during exception handling, which allows local users to obtain sensitive information by reading the exc…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.0038 Published 2014-08-18 No fix listed CWE-310

TI-2014-01126 CVE-2014-1467 · GHSA-xx52-g2px-mxcx

BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise…

LOW 25

BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise Server Express for Exchange through 5.0.4, Enterprise Server for Domino through 5…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01257 Published 2014-02-14 No fix listed CWE-255

TI-2013-03226 CVE-2013-3693 · GHSA-399c-wvqc-phrq

The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0…

LOW 36

The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly restrict access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to…

CVSS 2.0HIGH 7.9 Adjacent network No auth Interaction — EPSS 0.00964 Published 2013-10-11 No fix listed CWE-264