Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

blackberry workspaces - vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2017-9368
An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for server-side applications by crafting a request for specific files.
Blackberry Workspaces Vapp 5.5.1Blackberry Workspaces Vapp 5.5.8Blackberry Workspaces Vapp 5.5.3Blackberry Workspaces Vapp 5.5.4Blackberry Workspaces Vapp 5.5.5Blackberry Workspaces Vapp 5.5.6Blackberry Workspaces Vapp 5.5.0Blackberry Workspaces Vapp 5.5.2Blackberry Workspaces Vapp 5.5.7Blackberry Workspaces Vapp 5.5.9Blackberry Workspaces Vapp 5.6.5Blackberry Workspaces Vapp 5.6.0Blackberry Workspaces Vapp 5.6.1Blackberry Workspaces Vapp 5.6.2Blackberry Workspaces Vapp 5.6.3Blackberry Workspaces Vapp 5.6.4Blackberry Workspaces Vapp 5.6.6Blackberry Workspaces Appliance-x
6.8
CVSSv2
CVE-2017-9367
A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an malicious user to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request.
Blackberry Workspaces Vapp 5.5.3Blackberry Workspaces Vapp 5.5.5Blackberry Workspaces Vapp 5.5.0Blackberry Workspaces Vapp 5.5.1Blackberry Workspaces Vapp 5.5.2Blackberry Workspaces Vapp 5.5.7Blackberry Workspaces Vapp 5.5.8Blackberry Workspaces Vapp 5.5.9Blackberry Workspaces Vapp 5.5.4Blackberry Workspaces Vapp 5.5.6Blackberry Workspaces Vapp 5.6.2Blackberry Workspaces Vapp 5.6.4Blackberry Workspaces Vapp 5.6.5Blackberry Workspaces Vapp 5.6.6Blackberry Workspaces Vapp 5.6.0Blackberry Workspaces Vapp 5.6.1Blackberry Workspaces Vapp 5.6.3Blackberry Workspaces Appliance-x
6.5
CVSSv2
CVE-2021-22155
An Authentication Bypass vulnerability in the SAML Authentication component of BlackBerry Workspaces Server (deployed with Appliance-X) version(s) 10.1, 9.1 and previous versions could allow an malicious user to potentially gain access to the application in the context of the tar...
Blackberry Workspaces Server 10.1Blackberry Workspaces Server
4.3
CVSSv2
CVE-2017-3890
A reflected cross-site scripting vulnerability in the BlackBerry WatchDox Server components Appliance-X, version 1.8.1 and previous versions, and vAPP, versions 4.6.0 to 5.4.1, allows remote malicious users to execute script commands in the context of the affected browser by pers...
Blackberry Appliance-xBlackberry Workspaces Vapp 4.6.0Blackberry Workspaces Vapp 5.4.1
6.5
CVSSv2
CVE-2017-9370
An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who has legitimate access to BlackBerry Workspaces to gain access to another user's workspace by making multiple login requests to the ser...
Blackberry Workspaces -
7.5
CVSSv2
CVE-2020-1938
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exp...
Apache TomcatApache Geode 1.12.0Fedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Oracle Transportation Management 6.3.7Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Instantis EnterprisetrackOracle Mysql Enterprise MonitorOracle Health Sciences Empirica Signal 7.3.3Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Workload Manager 18cOracle Workload Manager 19cOracle Workload Manager 12.2.0.1Oracle Agile Engineering Data Management 6.2.1.0
4
CVSSv2
CVE-2020-11652
An issue exists in SaltStack Salt prior to 2019.2.4 and 3000 prior to 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.
Saltstack SaltOpensuse Leap 15.1Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 16.04Blackberry Workspaces Server 9.1.0Blackberry Workspaces ServerVmware Application Remote Collector 8.0.0Vmware Application Remote Collector 7.5.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook