Search criteria

9 vulnerabilities found for enterprise_service by blackberry

FKIE_CVE-2017-3894

Vulnerability from fkie_nvd - Published: 2017-05-10 16:29 - Updated: 2025-04-20 01:37
Severity ?
6.1 (Medium) - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Summary
A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows attackers to execute actions in the context of a Management Console administrator by uploading a malicious script and then persuading a target administrator to view the specific location of the malicious script within the Management Console.
References
secure@blackberry.comhttp://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000044565Vendor Advisory
secure@blackberry.comhttp://www.securityfocus.com/bid/98552
secure@blackberry.comhttp://www.securitytracker.com/id/1038465
af854a3a-2127-422b-91ae-364da2661108http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000044565Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/98552
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1038465
Impacted products
Vendor Product Version
blackberry enterprise_service 12.0
blackberry enterprise_service 12.0.1
blackberry enterprise_service 12.1
blackberry enterprise_service 12.1.0
blackberry enterprise_service 12.1.1
blackberry enterprise_service 12.2.0
blackberry enterprise_service 12.2.1
blackberry enterprise_service 12.3.0
blackberry enterprise_service 12.3.1
blackberry enterprise_service 12.4.0
blackberry enterprise_service 12.4.1
blackberry enterprise_service 12.5.0
blackberry enterprise_service 12.5.1
blackberry enterprise_service 12.5.2
blackberry unified_endpoint_manager *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "56D736AE-2679-43E6-A281-F4F5D3A45B32",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6ED84DDD-A736-4990-AF43-B94974B04BAA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "03F470B0-5E8E-43EE-9DE8-59EFF2466F90",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "29E309B5-5F9E-4D8D-8A0A-49F3EB2B31A7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FD293D26-C7BB-4F89-8B8B-18F96BCDABF5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "0633AD14-B5CC-46EA-88EB-B39B1A32FB15",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6247B841-45B7-4CCE-A189-3EBFC8AB2003",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7DE5722D-E406-4EE1-B55A-15B6B36FCFDA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "33F4B47B-A4AB-42E1-BDB6-A027B79CB3B4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "42160112-F133-4377-9CBA-56B71AAF5678",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "EBE0CC41-33D3-4102-84E8-22E2C70AD604",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "65F8998A-C7B7-41A0-8B1B-2C72132D49EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0DFB57A-A2BF-4DE5-A25B-91D91159189F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "9576124A-433E-4CBC-944B-9C06D794F937",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:unified_endpoint_manager:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F99555CB-D274-4236-B47C-E60DD334F872",
              "versionEndIncluding": "12.6.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows attackers to execute actions in the context of a Management Console administrator by uploading a malicious script and then persuading a target administrator to view the specific location of the malicious script within the Management Console."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de tipo cross-site scripting almacenado en la  Consola de Administraci\u00f3n de BlackBerry Unified Endpoint Manager versi\u00f3n 12.6.1 y anteriores, y todas las versiones de BES12, permite a los atacantes ejecutar acciones en el contexto de un administrador de la Consola de Administraci\u00f3n mediante la carga de un script malicioso y luego persuadiendo a un administrador destino para visualizar la ubicaci\u00f3n espec\u00edfica del script malicioso dentro de la Consola de Administraci\u00f3n."
    }
  ],
  "id": "CVE-2017-3894",
  "lastModified": "2025-04-20T01:37:25.860",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 6.1,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 2.7,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-05-10T16:29:00.150",
  "references": [
    {
      "source": "secure@blackberry.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://support.blackberry.com/kb/articleDetail?language=en_US\u0026articleNumber=000044565"
    },
    {
      "source": "secure@blackberry.com",
      "url": "http://www.securityfocus.com/bid/98552"
    },
    {
      "source": "secure@blackberry.com",
      "url": "http://www.securitytracker.com/id/1038465"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://support.blackberry.com/kb/articleDetail?language=en_US\u0026articleNumber=000044565"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/98552"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1038465"
    }
  ],
  "sourceIdentifier": "secure@blackberry.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2016-3130

Vulnerability from fkie_nvd - Published: 2017-01-13 09:59 - Updated: 2025-04-20 01:37
Severity ?
8.1 (High) - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt.
References
secure@blackberry.comhttp://support.blackberry.com/kb/articleDetail?articleNumber=000038914
secure@blackberry.comhttp://www.securityfocus.com/bid/95924
secure@blackberry.comhttp://www.securitytracker.com/id/1037584
af854a3a-2127-422b-91ae-364da2661108http://support.blackberry.com/kb/articleDetail?articleNumber=000038914
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/95924
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1037584
Impacted products
Vendor Product Version
blackberry enterprise_service 12.0.0
blackberry enterprise_service 12.0.1
blackberry enterprise_service 12.1.0
blackberry enterprise_service 12.2.0
blackberry enterprise_service 12.2.1
blackberry enterprise_service 12.3.0
blackberry enterprise_service 12.3.1
blackberry enterprise_service 12.4.0
blackberry enterprise_service 12.4.1
blackberry enterprise_service 12.5.0a
blackberry enterprise_service 12.5.1
blackberry enterprise_service 12.5.2
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "CBD8C766-8C91-440F-99F7-7526AA7FD2BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6ED84DDD-A736-4990-AF43-B94974B04BAA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "29E309B5-5F9E-4D8D-8A0A-49F3EB2B31A7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "0633AD14-B5CC-46EA-88EB-B39B1A32FB15",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6247B841-45B7-4CCE-A189-3EBFC8AB2003",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7DE5722D-E406-4EE1-B55A-15B6B36FCFDA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "33F4B47B-A4AB-42E1-BDB6-A027B79CB3B4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "42160112-F133-4377-9CBA-56B71AAF5678",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "EBE0CC41-33D3-4102-84E8-22E2C70AD604",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.5.0a:*:*:*:*:*:*:*",
              "matchCriteriaId": "A138FF65-4563-4B65-B581-632DA00FB9E6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0DFB57A-A2BF-4DE5-A25B-91D91159189F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "9576124A-433E-4CBC-944B-9C06D794F937",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de divulgaci\u00f3n de informaci\u00f3n en el Core y Management Console en BlackBerry Enterprise Server (BES) 12 hasta la versi\u00f3n 12.5.2 permite a atacantes remotos obtener credenciales locales o de dominio de una cuenta de administrador o usuario espiando el tr\u00e1fico entre los dos elementos durante un intento de inicio de sesi\u00f3n."
    }
  ],
  "id": "CVE-2016-3130",
  "lastModified": "2025-04-20T01:37:25.860",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-01-13T09:59:00.437",
  "references": [
    {
      "source": "secure@blackberry.com",
      "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038914"
    },
    {
      "source": "secure@blackberry.com",
      "url": "http://www.securityfocus.com/bid/95924"
    },
    {
      "source": "secure@blackberry.com",
      "url": "http://www.securitytracker.com/id/1037584"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038914"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/95924"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1037584"
    }
  ],
  "sourceIdentifier": "secure@blackberry.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        },
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2016-3128

Vulnerability from fkie_nvd - Published: 2017-01-13 09:59 - Updated: 2025-04-20 01:37
Severity ?
8.2 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Summary
A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES.
References
secure@blackberry.comhttp://support.blackberry.com/kb/articleDetail?articleNumber=000038913Mitigation, Vendor Advisory
secure@blackberry.comhttp://www.securityfocus.com/bid/95624
secure@blackberry.comhttp://www.securitytracker.com/id/1037585
af854a3a-2127-422b-91ae-364da2661108http://support.blackberry.com/kb/articleDetail?articleNumber=000038913Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/95624
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1037585
Impacted products
Vendor Product Version
blackberry enterprise_service 12.0.0
blackberry enterprise_service 12.0.1
blackberry enterprise_service 12.1.0
blackberry enterprise_service 12.2.0
blackberry enterprise_service 12.2.1
blackberry enterprise_service 12.3.0
blackberry enterprise_service 12.3.1
blackberry enterprise_service 12.4.0
blackberry enterprise_service 12.4.1
blackberry enterprise_service 12.5.0a
blackberry enterprise_service 12.5.1
blackberry enterprise_service 12.5.2
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "CBD8C766-8C91-440F-99F7-7526AA7FD2BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6ED84DDD-A736-4990-AF43-B94974B04BAA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "29E309B5-5F9E-4D8D-8A0A-49F3EB2B31A7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "0633AD14-B5CC-46EA-88EB-B39B1A32FB15",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6247B841-45B7-4CCE-A189-3EBFC8AB2003",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7DE5722D-E406-4EE1-B55A-15B6B36FCFDA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "33F4B47B-A4AB-42E1-BDB6-A027B79CB3B4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "42160112-F133-4377-9CBA-56B71AAF5678",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "EBE0CC41-33D3-4102-84E8-22E2C70AD604",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.5.0a:*:*:*:*:*:*:*",
              "matchCriteriaId": "A138FF65-4563-4B65-B581-632DA00FB9E6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0DFB57A-A2BF-4DE5-A25B-91D91159189F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:blackberry:enterprise_service:12.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "9576124A-433E-4CBC-944B-9C06D794F937",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de suplantaci\u00f3n en el Core de BlackBerry Enterprise Server (BES) 12 hasta la versi\u00f3n 12.5.2 permite a atacantes remotos registrar un dispositivo ileg\u00edtimo al BES, acceder a los par\u00e1metros del dispositivo para el BES o enviar informaci\u00f3n falsa al BES accediendo a Informaci\u00f3n espec\u00edfica sobre un dispositivo que se inscribi\u00f3 leg\u00edtimamente en el BES."
    }
  ],
  "id": "CVE-2016-3128",
  "lastModified": "2025-04-20T01:37:25.860",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 6.4,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 4.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 8.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "LOW",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 4.2,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-01-13T09:59:00.420",
  "references": [
    {
      "source": "secure@blackberry.com",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038913"
    },
    {
      "source": "secure@blackberry.com",
      "url": "http://www.securityfocus.com/bid/95624"
    },
    {
      "source": "secure@blackberry.com",
      "url": "http://www.securitytracker.com/id/1037585"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038913"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/95624"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1037585"
    }
  ],
  "sourceIdentifier": "secure@blackberry.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-254"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2017-3894 (GCVE-0-2017-3894)

Vulnerability from cvelistv5 – Published: 2017-05-10 16:00 – Updated: 2024-08-05 14:39
VLAI?
Summary
A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows attackers to execute actions in the context of a Management Console administrator by uploading a malicious script and then persuading a target administrator to view the specific location of the malicious script within the Management Console.
Severity ?
No CVSS data available.
CWE
  • XSS
Assigner
References
Impacted products
Vendor Product Version
BlackBerry Unified Endpoint Manager Affected: before 12.6.2
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:39:41.190Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "98552",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98552"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.blackberry.com/kb/articleDetail?language=en_US\u0026articleNumber=000044565"
          },
          {
            "name": "1038465",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038465"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Unified Endpoint Manager",
          "vendor": "BlackBerry",
          "versions": [
            {
              "status": "affected",
              "version": "before 12.6.2"
            }
          ]
        },
        {
          "product": "BES12",
          "vendor": "BlackBerry",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        }
      ],
      "datePublic": "2017-05-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows attackers to execute actions in the context of a Management Console administrator by uploading a malicious script and then persuading a target administrator to view the specific location of the malicious script within the Management Console."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "XSS",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-07T09:57:01",
        "orgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c",
        "shortName": "blackberry"
      },
      "references": [
        {
          "name": "98552",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98552"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.blackberry.com/kb/articleDetail?language=en_US\u0026articleNumber=000044565"
        },
        {
          "name": "1038465",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038465"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@blackberry.com",
          "ID": "CVE-2017-3894",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Unified Endpoint Manager",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 12.6.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "BES12",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "all versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "BlackBerry"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows attackers to execute actions in the context of a Management Console administrator by uploading a malicious script and then persuading a target administrator to view the specific location of the malicious script within the Management Console."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "XSS"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "98552",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/98552"
            },
            {
              "name": "http://support.blackberry.com/kb/articleDetail?language=en_US\u0026articleNumber=000044565",
              "refsource": "CONFIRM",
              "url": "http://support.blackberry.com/kb/articleDetail?language=en_US\u0026articleNumber=000044565"
            },
            {
              "name": "1038465",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038465"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c",
    "assignerShortName": "blackberry",
    "cveId": "CVE-2017-3894",
    "datePublished": "2017-05-10T16:00:00",
    "dateReserved": "2016-12-21T00:00:00",
    "dateUpdated": "2024-08-05T14:39:41.190Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-3128 (GCVE-0-2016-3128)

Vulnerability from cvelistv5 – Published: 2017-01-13 09:00 – Updated: 2024-08-05 23:47
VLAI?
Summary
A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES.
Severity ?
No CVSS data available.
CWE
  • spoofing
Assigner
References
Impacted products
Vendor Product Version
n/a BES12 versions through 12.5.2 Affected: BES12 versions through 12.5.2
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:47:57.214Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038913"
          },
          {
            "name": "95624",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95624"
          },
          {
            "name": "1037585",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037585"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BES12 versions through 12.5.2",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "BES12 versions through 12.5.2"
            }
          ]
        }
      ],
      "datePublic": "2017-01-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "spoofing",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-19T10:57:01",
        "orgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c",
        "shortName": "blackberry"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038913"
        },
        {
          "name": "95624",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95624"
        },
        {
          "name": "1037585",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037585"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@blackberry.com",
          "ID": "CVE-2016-3128",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BES12 versions through 12.5.2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "BES12 versions through 12.5.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "spoofing"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038913",
              "refsource": "CONFIRM",
              "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038913"
            },
            {
              "name": "95624",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95624"
            },
            {
              "name": "1037585",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037585"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c",
    "assignerShortName": "blackberry",
    "cveId": "CVE-2016-3128",
    "datePublished": "2017-01-13T09:00:00",
    "dateReserved": "2016-03-11T00:00:00",
    "dateUpdated": "2024-08-05T23:47:57.214Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-3130 (GCVE-0-2016-3130)

Vulnerability from cvelistv5 – Published: 2017-01-13 09:00 – Updated: 2024-08-05 23:47
VLAI?
Summary
An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt.
Severity ?
No CVSS data available.
CWE
  • information disclosure
Assigner
References
Impacted products
Vendor Product Version
n/a BES12 versions through 12.5.2 Affected: BES12 versions through 12.5.2
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:47:57.205Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038914"
          },
          {
            "name": "95924",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95924"
          },
          {
            "name": "1037584",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037584"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BES12 versions through 12.5.2",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "BES12 versions through 12.5.2"
            }
          ]
        }
      ],
      "datePublic": "2017-01-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "information disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-02-02T10:57:01",
        "orgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c",
        "shortName": "blackberry"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038914"
        },
        {
          "name": "95924",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95924"
        },
        {
          "name": "1037584",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037584"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@blackberry.com",
          "ID": "CVE-2016-3130",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BES12 versions through 12.5.2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "BES12 versions through 12.5.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "information disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038914",
              "refsource": "CONFIRM",
              "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038914"
            },
            {
              "name": "95924",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95924"
            },
            {
              "name": "1037584",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037584"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c",
    "assignerShortName": "blackberry",
    "cveId": "CVE-2016-3130",
    "datePublished": "2017-01-13T09:00:00",
    "dateReserved": "2016-03-11T00:00:00",
    "dateUpdated": "2024-08-05T23:47:57.205Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-3894 (GCVE-0-2017-3894)

Vulnerability from nvd – Published: 2017-05-10 16:00 – Updated: 2024-08-05 14:39
VLAI?
Summary
A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows attackers to execute actions in the context of a Management Console administrator by uploading a malicious script and then persuading a target administrator to view the specific location of the malicious script within the Management Console.
Severity ?
No CVSS data available.
CWE
  • XSS
Assigner
References
Impacted products
Vendor Product Version
BlackBerry Unified Endpoint Manager Affected: before 12.6.2
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:39:41.190Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "98552",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98552"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.blackberry.com/kb/articleDetail?language=en_US\u0026articleNumber=000044565"
          },
          {
            "name": "1038465",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038465"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Unified Endpoint Manager",
          "vendor": "BlackBerry",
          "versions": [
            {
              "status": "affected",
              "version": "before 12.6.2"
            }
          ]
        },
        {
          "product": "BES12",
          "vendor": "BlackBerry",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        }
      ],
      "datePublic": "2017-05-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows attackers to execute actions in the context of a Management Console administrator by uploading a malicious script and then persuading a target administrator to view the specific location of the malicious script within the Management Console."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "XSS",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-07T09:57:01",
        "orgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c",
        "shortName": "blackberry"
      },
      "references": [
        {
          "name": "98552",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98552"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.blackberry.com/kb/articleDetail?language=en_US\u0026articleNumber=000044565"
        },
        {
          "name": "1038465",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038465"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@blackberry.com",
          "ID": "CVE-2017-3894",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Unified Endpoint Manager",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 12.6.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "BES12",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "all versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "BlackBerry"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows attackers to execute actions in the context of a Management Console administrator by uploading a malicious script and then persuading a target administrator to view the specific location of the malicious script within the Management Console."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "XSS"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "98552",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/98552"
            },
            {
              "name": "http://support.blackberry.com/kb/articleDetail?language=en_US\u0026articleNumber=000044565",
              "refsource": "CONFIRM",
              "url": "http://support.blackberry.com/kb/articleDetail?language=en_US\u0026articleNumber=000044565"
            },
            {
              "name": "1038465",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038465"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c",
    "assignerShortName": "blackberry",
    "cveId": "CVE-2017-3894",
    "datePublished": "2017-05-10T16:00:00",
    "dateReserved": "2016-12-21T00:00:00",
    "dateUpdated": "2024-08-05T14:39:41.190Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-3128 (GCVE-0-2016-3128)

Vulnerability from nvd – Published: 2017-01-13 09:00 – Updated: 2024-08-05 23:47
VLAI?
Summary
A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES.
Severity ?
No CVSS data available.
CWE
  • spoofing
Assigner
References
Impacted products
Vendor Product Version
n/a BES12 versions through 12.5.2 Affected: BES12 versions through 12.5.2
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:47:57.214Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038913"
          },
          {
            "name": "95624",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95624"
          },
          {
            "name": "1037585",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037585"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BES12 versions through 12.5.2",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "BES12 versions through 12.5.2"
            }
          ]
        }
      ],
      "datePublic": "2017-01-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "spoofing",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-19T10:57:01",
        "orgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c",
        "shortName": "blackberry"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038913"
        },
        {
          "name": "95624",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95624"
        },
        {
          "name": "1037585",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037585"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@blackberry.com",
          "ID": "CVE-2016-3128",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BES12 versions through 12.5.2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "BES12 versions through 12.5.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "spoofing"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038913",
              "refsource": "CONFIRM",
              "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038913"
            },
            {
              "name": "95624",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95624"
            },
            {
              "name": "1037585",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037585"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c",
    "assignerShortName": "blackberry",
    "cveId": "CVE-2016-3128",
    "datePublished": "2017-01-13T09:00:00",
    "dateReserved": "2016-03-11T00:00:00",
    "dateUpdated": "2024-08-05T23:47:57.214Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-3130 (GCVE-0-2016-3130)

Vulnerability from nvd – Published: 2017-01-13 09:00 – Updated: 2024-08-05 23:47
VLAI?
Summary
An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt.
Severity ?
No CVSS data available.
CWE
  • information disclosure
Assigner
References
Impacted products
Vendor Product Version
n/a BES12 versions through 12.5.2 Affected: BES12 versions through 12.5.2
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:47:57.205Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038914"
          },
          {
            "name": "95924",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95924"
          },
          {
            "name": "1037584",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037584"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BES12 versions through 12.5.2",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "BES12 versions through 12.5.2"
            }
          ]
        }
      ],
      "datePublic": "2017-01-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "information disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-02-02T10:57:01",
        "orgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c",
        "shortName": "blackberry"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038914"
        },
        {
          "name": "95924",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95924"
        },
        {
          "name": "1037584",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037584"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@blackberry.com",
          "ID": "CVE-2016-3130",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BES12 versions through 12.5.2",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "BES12 versions through 12.5.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "information disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038914",
              "refsource": "CONFIRM",
              "url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038914"
            },
            {
              "name": "95924",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95924"
            },
            {
              "name": "1037584",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037584"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c",
    "assignerShortName": "blackberry",
    "cveId": "CVE-2016-3130",
    "datePublished": "2017-01-13T09:00:00",
    "dateReserved": "2016-03-11T00:00:00",
    "dateUpdated": "2024-08-05T23:47:57.205Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}