Vulnerabilities > Blackberry > Unified Endpoint Manager > 12.8.1

DATE CVE VULNERABILITY TITLE RISK
2020-10-14 CVE-2020-6933 Improper Input Validation vulnerability in Blackberry Unified Endpoint Manager
An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker to potentially cause a Denial of Service (DoS) of the UEM Core service.
local
low complexity
blackberry CWE-20
5.5
2018-12-20 CVE-2018-8892 Cross-Site Request Forgery (CSRF) vulnerability in Blackberry Unified Endpoint Manager
A cross-site request forgery (CSRF) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator.
network
low complexity
blackberry CWE-352
6.5
2018-12-20 CVE-2018-8891 Cross-site Scripting vulnerability in Blackberry Unified Endpoint Manager
Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.
network
low complexity
blackberry CWE-79
4.8
2018-12-20 CVE-2018-8888 Cross-site Scripting vulnerability in Blackberry Unified Endpoint Manager
A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.
network
low complexity
blackberry CWE-79
4.8
2018-10-12 CVE-2018-8890 Information Exposure vulnerability in Blackberry Unified Endpoint Manager 12.8.0/12.8.1
An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user.
network
low complexity
blackberry CWE-200
7.5