CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-8890
https://notcve.org/view.php?id=CVE-2018-8890
12 Oct 2018 — An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user. Una vulnerabilidad de divulgación de información en la consola de gestión de BlackBerry UEM 12.8.0 y 12.8.1 podría permitir que un atacante tome el control de una sesión de usuario UEM y realice acciones administrativas en el contexto del usuario. • http://support.blackberry.com/kb/articleDetail?articleNumber=000052161&language=en_US • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.7EPSS: 0%CPEs: 1EXPL: 0CVE-2018-8889
https://notcve.org/view.php?id=CVE-2018-8889
19 Sep 2018 — A directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility Server (BEMS) 2.8.17.29 and earlier could allow an attacker to retrieve arbitrary files in the context of a BEMS administrator account. Una vulnerabilidad de salto de directorio en Connect Service de BlackBerry Enterprise Mobility Server (BEMS) en versiones 2.8.17.29 y anteriores podría permitir que un atacante recupere archivos arbitrarios en el contexto de una cuenta de administrador BEMS. • http://support.blackberry.com/kb/articleDetail?articleNumber=000051590&language=en_US • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2017-17442
https://notcve.org/view.php?id=CVE-2017-17442
13 Mar 2018 — In BlackBerry UEM Management Console version 12.7.1 and earlier, a reflected cross-site scripting vulnerability that could allow an attacker to execute script commands in the context of the affected UEM Management Console account by crafting a malicious link and then persuading a user with legitimate access to the Management Console to click on the malicious link. En BlackBerry UEM Management Console, en versiones 12.7.1 y anteriores, existe una vulnerabilidad de Cross-Site Scripting (XSS) que podría permit... • http://support.blackberry.com/kb/articleDetail?articleNumber=000047227 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.1EPSS: 0%CPEs: 1EXPL: 0CVE-2017-3891
https://notcve.org/view.php?id=CVE-2017-3891
14 Nov 2017 — In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet enabled on networks comprising two or more QNet nodes could allow an attacker to access local and remote files or take ownership of files on other QNX nodes regardless of permissions by executing commands targeting arbitrary nodes from a secondary QNX 6.6.0 QNet node. En BlackBerry QNX Software Development Platform (SDP) 6.6.0, una vulnerabilidad de eleva... • http://support.blackberry.com/kb/articleDetail?articleNumber=000046674 • CWE-863: Incorrect Authorization •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-3892
https://notcve.org/view.php?id=CVE-2017-3892
14 Nov 2017 — In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an information disclosure vulnerability in the default configuration of the QNX SDP could allow an attacker to gain information relating to memory layout that could be used in a blended attack by executing commands targeting procfs resources. En BlackBerry QNX Software Development Platform (SDP) 6.6.0, una vulnerabilidad de divulgación de información en la configuración por defecto del QNX SDP podría permitir que un atacante obtenga información re... • http://support.blackberry.com/kb/articleDetail?articleNumber=000046674 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-3893
https://notcve.org/view.php?id=CVE-2017-3893
14 Nov 2017 — In BlackBerry QNX Software Development Platform (SDP) 6.6.0, the default configuration of the QNX SDP system did not in all circumstances prevent attackers from modifying the GOT or PLT tables with buffer overflow attacks. En BlackBerry QNX Software Development Platform (SDP) 6.6.0, la configuración por defecto del sistema QNX SDP no evitaba en todas las circunstancias que los atacantes modificase las tablas GOT o PLT con ataques de desbordamiento de búfer. • http://support.blackberry.com/kb/articleDetail?articleNumber=000046674 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 4.9EPSS: 0%CPEs: 3EXPL: 0CVE-2017-9369
https://notcve.org/view.php?id=CVE-2017-9369
14 Nov 2017 — In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, an information disclosure vulnerability in the default configuration of the QNX SDP could allow an attacker to gain information relating to memory layout of higher privileged processes by manipulating environment variables that influence the loader. En BlackBerry QNX Software Development Platform (SDP) 6.6.0 y 6.5.0 SP1 y anteriores, una vulnerabilidad de divulgación de información en la configuración por defecto de la pl... • http://support.blackberry.com/kb/articleDetail?articleNumber=000046674 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.9EPSS: 0%CPEs: 3EXPL: 0CVE-2017-9371
https://notcve.org/view.php?id=CVE-2017-9371
14 Nov 2017 — In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the QNX SDP could allow an attacker being able to reduce the entropy of the PRNG, making other blended attacks more practical by gaining control over environmental factors that influence seed generation. En BlackBerry QNX Software Development Platform (SDP) 6.6.0 y 6.5.0 SP1 y anteriores, una vulnerabilidad de pérdida de integridad en la configuración por d... • http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000046674 • CWE-332: Insufficient Entropy in PRNG •
CVSS: 9.8EPSS: 0%CPEs: 18EXPL: 0CVE-2017-9367
https://notcve.org/view.php?id=CVE-2017-9367
16 Oct 2017 — A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request. Una vulnerabilidad de salto de directorio en BlackBerry Workspaces Server podría permitir que un atacante ejecute o suba archivos arbitrarios, o que revele el contenido de archivos arbitrarios en cualquier parte del servidor web manipulando una UR... • http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 0%CPEs: 18EXPL: 0CVE-2017-9368
https://notcve.org/view.php?id=CVE-2017-9368
16 Oct 2017 — An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for server-side applications by crafting a request for specific files. Una vulnerabilidad de divulgación de información en BlackBerry Workspaces Server podría resultar en un atacante obteniendo acceso al código fuente para las aplicaciones del lado del servidor manipulando una petición para archivos específicos. • http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •