Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-3894

A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows attackers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
blackberry

Description

A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows attackers to execute actions in the context of a Management Console administrator by uploading a malicious script and then persuading a target administrator to view the specific location of the malicious script within the Management Console.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BlackBerry Unified Endpoint Manager

  • before 12.6.2affected

BlackBerry BES12

  • all versionsaffected

References