Vulnerabilities > Blackberry
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-07-12 | CVE-2019-8998 | Information Exposure vulnerability in Blackberry QNX Software Development Platform 6.4.0/6.4.1/6.5.0 An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space. | 4.6 |
| 2019-04-18 | CVE-2019-8999 | XXE vulnerability in Blackberry Unified Endpoint Management An XML External Entity vulnerability in the UEM Core of BlackBerry UEM version(s) earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account. | 5.0 |
| 2019-03-21 | CVE-2019-8997 | XXE vulnerability in Blackberry Athoc An XML External Entity Injection (XXE) vulnerability in the Management System (console) of BlackBerry AtHoc versions earlier than 7.6 HF-567 could allow an attacker to potentially read arbitrary local files from the application server or make requests on the network by entering maliciously crafted XML in an existing field. | 4.3 |
| 2018-12-20 | CVE-2018-8892 | Cross-Site Request Forgery (CSRF) vulnerability in Blackberry Unified Endpoint Manager A cross-site request forgery (CSRF) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator. | 4.3 |
| 2018-12-20 | CVE-2018-8891 | Cross-site Scripting vulnerability in Blackberry Unified Endpoint Manager Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator. | 3.5 |
| 2018-12-20 | CVE-2018-8888 | Cross-site Scripting vulnerability in Blackberry Unified Endpoint Manager A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator. | 3.5 |
| 2018-10-12 | CVE-2018-8890 | Information Exposure vulnerability in Blackberry Unified Endpoint Manager 12.8.0/12.8.1 An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user. | 5.0 |
| 2018-09-19 | CVE-2018-8889 | Path Traversal vulnerability in Blackberry Enterprise Mobility Server 2.6/2.8/2.8.17.29 A directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility Server (BEMS) 2.8.17.29 and earlier could allow an attacker to retrieve arbitrary files in the context of a BEMS administrator account. | 4.7 |
| 2018-03-13 | CVE-2017-17442 | Cross-site Scripting vulnerability in Blackberry Unified Endpoint Manager In BlackBerry UEM Management Console version 12.7.1 and earlier, a reflected cross-site scripting vulnerability that could allow an attacker to execute script commands in the context of the affected UEM Management Console account by crafting a malicious link and then persuading a user with legitimate access to the Management Console to click on the malicious link. | 6.1 |
| 2017-11-14 | CVE-2017-9371 | Insufficient Entropy in PRNG vulnerability in Blackberry QNX Software Development Platform 6.5.0/6.6.0 In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the QNX SDP could allow an attacker being able to reduce the entropy of the PRNG, making other blended attacks more practical by gaining control over environmental factors that influence seed generation. | 4.3 |