Vulnerabilities > Blackberry > Unified Endpoint Management

DATE CVE VULNERABILITY TITLE RISK
2021-05-13 CVE-2021-22152 Improper Input Validation vulnerability in Blackberry Unified Endpoint Management
A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user connections.
local
low complexity
blackberry CWE-20
5.5
2021-05-13 CVE-2021-22153 Improper Neutralization of Formula Elements in a CSV File vulnerability in Blackberry Unified Endpoint Management
A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially cause the spreadsheet application to run commands on the victim’s local machine with the authority of the user.
local
low complexity
blackberry CWE-1236
7.3
2021-05-13 CVE-2021-22154 Unspecified vulnerability in Blackberry Unified Endpoint Management
An Information Disclosure vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially gain access to a victim's web history.
network
low complexity
blackberry
5.3
2019-04-18 CVE-2019-8999 XXE vulnerability in Blackberry Unified Endpoint Management
An XML External Entity vulnerability in the UEM Core of BlackBerry UEM version(s) earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account.
network
low complexity
blackberry CWE-611
7.5