Blackberry Enterprise Server vulnerabilities
8 known vulnerabilities affecting blackberry/enterprise_server.
Total CVEs
8
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM7
Vulnerabilities
Page 1 of 1
CVE-2008-3246P3CRITICALCVSS 9.3v4.1v4.1.3+2 more2008-07-21
CVE-2008-3246 [CRITICAL] CWE-94 CVE-2008-3246: Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in Bla
Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise Server 4.1 SP3 (4.1.3) through 4.1 SP5 (4.1.5) allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file attachment.
nvd
CVE-2016-1918P4MEDIUMCVSS 6.1≤ 12.42016-04-22
CVE-2016-1918 [MEDIUM] CVE-2016-1918: Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1917.
nvd
CVE-2016-1917P4MEDIUMCVSS 6.1≤ 12.42016-04-22
CVE-2016-1917 [MEDIUM] CWE-79 CVE-2016-1917: Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1918.
nvd
CVE-2016-3126P4MEDIUMCVSS 6.1≤ 12.42016-04-22
CVE-2016-3126 [MEDIUM] CWE-79 CVE-2016-3126: Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
nvd
CVE-2016-1916P4MEDIUMCVSS 5.4≤ 12.42016-04-22
CVE-2016-1916 [MEDIUM] CWE-79 CVE-2016-1916: Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a certain Export IT screen.
nvd
CVE-2014-1467P4MEDIUMCVSS 5.0≤ 5.0.42014-02-14
CVE-2014-1467 [MEDIUM] CWE-255 CVE-2014-1467: BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Expres
BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise Server Express for Exchange through 5.0.4, Enterprise Server for Domino through 5.0.4 MR6, Enterprise Server for Exchange through 5.0.4 MR6, and Enterprise Server for GroupWise through 5.0.4 MR6 log cleartext crede
nvd
CVE-2015-4112P4MEDIUMCVSS 4.3v12.0v12.12015-11-19
CVE-2015-4112 [MEDIUM] CWE-254 CVE-2015-4112: The Management Console in BlackBerry Enterprise Server (BES) 12 before 12.2 does not properly restri
The Management Console in BlackBerry Enterprise Server (BES) 12 before 12.2 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site, related to a "cross frame scripting" issue.
nvd
CVE-2014-1469P4MEDIUMCVSS 4.9≤ 5.0.42014-08-18
CVE-2014-1469 [MEDIUM] CWE-310 CVE-2014-1469: BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log clea
BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext credentials during exception handling, which allows local users to obtain sensitive information by reading the exception log file.
nvd