4.3
CVSSv2

CVE-2017-3890

Published: 13/01/2017 Updated: 22/04/2021
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

A reflected cross-site scripting vulnerability in the BlackBerry WatchDox Server components Appliance-X, version 1.8.1 and previous versions, and vAPP, versions 4.6.0 to 5.4.1, allows remote malicious users to execute script commands in the context of the affected browser by persuading a user to click an attacker-supplied malicious link.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

blackberry appliance-x

blackberry workspaces vapp 4.6.0

blackberry workspaces vapp 5.4.1