Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

blackberry unified endpoint manager vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2020-6933
An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and previous versions), and 12.11.1 QF3 (and previous versions) could allow an malicious user to potentially cause a Denial of Service (DoS) of the UEM Core service.
Blackberry Unified Endpoint ManagerBlackberry Unified Endpoint Manager 12.11.1Blackberry Unified Endpoint Manager 12.12.1aBlackberry Unified Endpoint Manager 12.13.0
5
CVSSv2
CVE-2018-8890
An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an malicious user to take over a UEM user's session and perform administrative actions in the context of the user.
Blackberry Unified Endpoint Manager 12.8.0Blackberry Unified Endpoint Manager 12.8.1
4.3
CVSSv2
CVE-2017-17442
In BlackBerry UEM Management Console version 12.7.1 and previous versions, a reflected cross-site scripting vulnerability that could allow an malicious user to execute script commands in the context of the affected UEM Management Console account by crafting a malicious link and t...
Blackberry Unified Endpoint Manager
3.5
CVSSv2
CVE-2018-8891
Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an malicious user to store script commands that could later be executed in the context of another Management Console administrator.
Blackberry Unified Endpoint Manager
3.5
CVSSv2
CVE-2018-8888
A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an malicious user to store script commands that could later be executed in the context of another Management Console administrator.
Blackberry Unified Endpoint Manager
4.3
CVSSv2
CVE-2018-8892
A cross-site request forgery (CSRF) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an malicious user to make modifications to the UEM settings in the context of a Management Console administrator.
Blackberry Unified Endpoint Manager
4.3
CVSSv2
CVE-2017-3894
A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and previous versions, and all versions of BES12, allows malicious users to execute actions in the context of a Management Console administrator by uploadin...
Blackberry Enterprise Service 12.0Blackberry Enterprise Service 12.0.1Blackberry Enterprise Service 12.3.1Blackberry Enterprise Service 12.4.0Blackberry Enterprise Service 12.2.1Blackberry Enterprise Service 12.3.0Blackberry Enterprise Service 12.1.0Blackberry Enterprise Service 12.1Blackberry Enterprise Service 12.4.1Blackberry Enterprise Service 12.5.0Blackberry Enterprise Service 12.1.1Blackberry Enterprise Service 12.2.0Blackberry Enterprise Service 12.5.1Blackberry Enterprise Service 12.5.2Blackberry Unified Endpoint Manager
5
CVSSv2
CVE-2016-2180
The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL up to and including 1.0.2h allows remote malicious users to cause a denial of service (out-of-bounds read and application crash) via a cr...
Openssl Openssl 1.0.1mOpenssl Openssl 1.0.2aOpenssl Openssl 1.0.1jOpenssl Openssl 1.0.1hOpenssl Openssl 1.0.2eOpenssl Openssl 1.0.1rOpenssl Openssl 1.0.2bOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.2gOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.2hOpenssl Openssl 1.0.1dOpenssl Openssl 1.0.1tOpenssl Openssl 1.0.2cOpenssl Openssl 1.0.1pOpenssl Openssl 1.0.1kOpenssl Openssl 1.0.1bOpenssl Openssl 1.0.1nOpenssl Openssl 1.0.1qOpenssl Openssl 1.0.1eOpenssl Openssl 1.0.1l
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook