Blackberry vulnerabilities
85 vulnerabilities
Known vulnerabilities in Blackberry products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 50 products.
Products
50- Qnx Software Development Platform21 vulnerabilities
- QNX Software Development Platform (Sdp)13 vulnerabilities
- Unified Endpoint Manager9 vulnerabilities
- Enterprise Server8 vulnerabilities
- Athoc7 vulnerabilities
- Blackberry Enterprise Service5 vulnerabilities
- Workspaces Server5 vulnerabilities
- Blackberry Os4 vulnerabilities
- Qnx Neutrino Rtos4 vulnerabilities
- QNX Software Development Platform (QNX SDP)4 vulnerabilities
- Unified Endpoint Management4 vulnerabilities
- Blackberry Link3 vulnerabilities
- Blackberry UEM3 vulnerabilities
- Enterprise Service3 vulnerabilities
- Protect3 vulnerabilities
- Secusuite3 vulnerabilities
- UEM3 vulnerabilities
- Workspaces Vapp3 vulnerabilities
- Enterprise Server Express2 vulnerabilities
- Qnx Momentics2 vulnerabilities
- Qnx Os For Medical2 vulnerabilities
- Qnx Os For Safety2 vulnerabilities
- Workspaces Appliance X2 vulnerabilities
- Z102 vulnerabilities
- Appliance X1 vulnerabilities
- Bes121 vulnerabilities
- Blackberry Athoc IWS1 vulnerabilities
- Blackberry® Athoc® (Onprem)1 vulnerabilities
- Blackberry Enterprise Mobility Server (Bems)1 vulnerabilities
- Blackberry Tablet Os1 vulnerabilities
- Blackberry Universal Device Service1 vulnerabilities
- Blackberry Workspaces Server; Watchdox By Blackberry Server1 vulnerabilities
- Blackberry World1 vulnerabilities
- Blackberry Z101 vulnerabilities
- Cylanceoptics For Windows1 vulnerabilities
- Enterprise Mobility Server1 vulnerabilities
- Good Control1 vulnerabilities
- Good Control Server1 vulnerabilities
- Good Enterprise Mobility Server1 vulnerabilities
- Playbook1 vulnerabilities
- Q101 vulnerabilities
- Q51 vulnerabilities
- Qnx Momentics Tool Suite1 vulnerabilities
- Qnx Neutrino Real Time Operating System1 vulnerabilities
- QNX Software Development Platform (Sdp), QNX OS For Medical And QNX OS For Safety1 vulnerabilities
- QNX Software Development Platform (Sdp), QNX OS For Medical (Qosm), And QNX OS For Safety (Qos)1 vulnerabilities
- UEM Management Console1 vulnerabilities
- Unite1 vulnerabilities
- Workspaces1 vulnerabilities
- Z301 vulnerabilities
CVE-2018-8891blackberryblackberry uem+1
EPSS score0.51%
Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.CVE-2018-8888blackberryblackberry uem+1EPSS score0.51%
A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.CVE-2018-8890blackberryuem+1EPSS score1.09%
An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user.CVE-2018-8889blackberryblackberry enterprise mobility server (bems)+1EPSS score0.48%
A directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility Server (BEMS) 2.8.17.29 and earlier could allow an attacker to retrieve arbitrary files in the context of a BEMS administrator account.CVE-2018-8892blackberryblackberry uem+1EPSS score0.41%
A cross-site request forgery (CSRF) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator.CVE-2013-2687blackberryqnx_momentics_tool_suite+2EPSS score8.22%
Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868.CVE-2013-2688blackberryqnx_neutrino_rtos+1EPSS score6.66%
Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868 that leverage improper handling of the /dev/photon device file.CVE-2013-6798blackberryblackberry_linkEPSS score1.85%
BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not properly determine the user account for execution of Peer Manager in certain situations involving successive logins with different accounts, which allows context-dependent attackers to bypass intended restrictions on remote file-access folders via IPv6 WebDAV requests, a different vulnerability than CVE-2013-3694.CVE-2013-3694blackberryblackberry_linkEPSS score0.96%
BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not require authentication for remote file-access folders, which allows remote attackers to read or create arbitrary files via IPv6 WebDAV requests, as demonstrated by a CSRF attack involving DNS rebinding.CVE-2013-3692blackberryblackberry_os+1EPSS score0.35%
BlackBerry 10 OS before 10.0.10.648 on BlackBerry Z10 smartphones uses weak permissions for a BlackBerry Protect object, which allows physically proximate attackers to bypass intended access restrictions by leveraging a user's BlackBerry Protect password-reset request and a user's installation of a crafted application.CVE-2013-3693blackberryblackberry_enterprise_serviceEPSS score0.96%
The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly restrict access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to upload and execute arbitrary packages via a request to port 1098.CVE-2021-22155blackberryworkspaces_serverEPSS score0.96%
An Authentication Bypass vulnerability in the SAML Authentication component of BlackBerry Workspaces Server (deployed with Appliance-X) version(s) 10.1, 9.1 and earlier could allow an attacker to potentially gain access to the application in the context of the targeted user’s account.CVE-2021-22154blackberryunified_endpoint_managementEPSS score0.79%
An Information Disclosure vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially gain access to a victim's web history.CVE-2021-22152blackberryunified_endpoint_managementEPSS score0.22%
A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user connections.CVE-2021-22153blackberryunified_endpoint_managementEPSS score0.96%
A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially cause the spreadsheet application to run commands on the victim’s local machine with the authority of the user.CVE-2021-22156blackberryqnx_os_for_medical+3EPSS score1.79%
An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® QNX Software Development Platform (SDP) version(s) 6.5.0SP1 and earlier, QNX OS for Medical 1.1 and earlier, and QNX OS for Safety 1.0.1 and earlier that could allow an attacker to potentially perform a denial of service or execute arbitrary code.CVE-2021-32021blackberryprotectEPSS score0.30%
A denial of service vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights on the system.CVE-2021-32023blackberryprotectEPSS score0.30%
An elevation of privilege vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights on the system.CVE-2021-32024blackberryqnx_software_development_platform+1EPSS score1.79%
A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process.CVE-2021-32022blackberryprotectEPSS score0.26%
A low privileged delete vulnerability using CEF RPC server of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights on the system and gaining the ability to delete data from the local system.