Vulnerabilities > Blackberry > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-11-14 | CVE-2023-32701 | Unspecified vulnerability in Blackberry QNX Software Development Platform 6.6.0/7.0/7.1 Improper Input Validation in the Networking Stack of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or a Denial-of-Service condition. | 7.1 |
| 2023-09-12 | CVE-2023-21521 | SQL Injection vulnerability in Blackberry Athoc 7.15 An SQL Injection vulnerability in the Management Console? (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database, recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system. | 7.2 |
| 2022-03-10 | CVE-2021-32025 | Unspecified vulnerability in Blackberry products An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.0 to 7.0, QNX Momentics all 6.3.x versions, QNX OS for Safety versions 1.0.0 to 1.0.2, QNX OS for Safety versions 2.0.0 to 2.0.1, QNX for Medical versions 1.0.0 to 1.1.1, and QNX OS for Medical version 2.0.0 could allow an attacker to potentially access data, modify behavior, or permanently crash the system. | 7.8 |
| 2021-11-10 | CVE-2021-32021 | Unspecified vulnerability in Blackberry Protect 1574 A denial of service vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights on the system. | 7.8 |
| 2021-11-10 | CVE-2021-32023 | Unspecified vulnerability in Blackberry Protect 1574 An elevation of privilege vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights on the system. | 7.8 |
| 2021-05-13 | CVE-2021-22153 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Blackberry Unified Endpoint Management A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially cause the spreadsheet application to run commands on the victim’s local machine with the authority of the user. | 7.3 |
| 2021-05-13 | CVE-2021-22155 | Improper Authentication vulnerability in Blackberry Workspaces Server An Authentication Bypass vulnerability in the SAML Authentication component of BlackBerry Workspaces Server (deployed with Appliance-X) version(s) 10.1, 9.1 and earlier could allow an attacker to potentially gain access to the application in the context of the targeted user’s account. | 8.8 |
| 2019-07-12 | CVE-2019-8998 | Unspecified vulnerability in Blackberry QNX Software Development Platform 6.4.0/6.4.1 An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space. | 7.8 |
| 2019-04-18 | CVE-2019-8999 | XXE vulnerability in Blackberry Unified Endpoint Management An XML External Entity vulnerability in the UEM Core of BlackBerry UEM version(s) earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account. | 7.5 |
| 2018-10-12 | CVE-2018-8890 | Information Exposure vulnerability in Blackberry Unified Endpoint Manager 12.8.0/12.8.1 An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user. | 7.5 |