Vulnerabilities > Blackberry

DATE CVE VULNERABILITY TITLE RISK
2021-05-13 CVE-2021-22152 Improper Input Validation vulnerability in Blackberry Unified Endpoint Management
A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user connections.
local
low complexity
blackberry CWE-20
2.1
2021-05-13 CVE-2021-22153 Improper Neutralization of Formula Elements in A CSV File vulnerability in Blackberry Unified Endpoint Management
A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially cause the spreadsheet application to run commands on the victim’s local machine with the authority of the user.
6.0
2021-05-13 CVE-2021-22154 Information Exposure vulnerability in Blackberry Unified Endpoint Management
An Information Disclosure vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially gain access to a victim's web history.
network
low complexity
blackberry CWE-200
5.0
2021-05-13 CVE-2021-22155 Incorrect Authorization vulnerability in Blackberry Workspaces Server
An Authentication Bypass vulnerability in the SAML Authentication component of BlackBerry Workspaces Server (deployed with Appliance-X) version(s) 10.1, 9.1 and earlier could allow an attacker to potentially gain access to the application in the context of the targeted user’s account.
network
low complexity
blackberry CWE-863
6.5
2020-10-14 CVE-2020-6933 Improper Input Validation vulnerability in Blackberry Unified Endpoint Manager
An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker to potentially cause a Denial of Service (DoS) of the UEM Core service.
local
low complexity
blackberry CWE-20
2.1
2020-08-12 CVE-2020-6932 Improper Input Validation vulnerability in Blackberry QNX Software Development Platform
An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server.
network
low complexity
blackberry CWE-20
critical
10.0
2020-02-10 CVE-2012-5828 Information Exposure vulnerability in Blackberry Playbook Firmware
BlackBerry PlayBook before 2.1 has an Information Disclosure Vulnerability via a Web browser component error
4.3
2019-08-14 CVE-2019-9506 Cryptographic Issues vulnerability in multiple products
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.
low complexity
google blackberry apple CWE-310
4.8
2019-07-12 CVE-2019-8998 Information Exposure vulnerability in Blackberry QNX Software Development Platform 6.4.0/6.4.1/6.5.0
An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space.
local
low complexity
blackberry CWE-200
4.6
2019-04-18 CVE-2019-8999 XXE vulnerability in Blackberry Unified Endpoint Management
An XML External Entity vulnerability in the UEM Core of BlackBerry UEM version(s) earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account.
network
low complexity
blackberry CWE-611
5.0