Vulnerabilities (CVE)

Filtered by vendor Blackberry Subscribe
Filtered by product Enterprise Service
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-3894 1 Blackberry 2 Enterprise Service, Unified Endpoint Manager 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows attackers to execute actions in the context of a Management Console administrator by uploading a malicious script and then persuading a target administrator to view the specific location of the malicious script within the Management Console.
CVE-2016-3130 1 Blackberry 1 Enterprise Service 2024-11-21 4.3 MEDIUM 8.1 HIGH
An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt.
CVE-2016-3128 1 Blackberry 1 Enterprise Service 2024-11-21 6.4 MEDIUM 8.2 HIGH
A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES.