Blackberry Enterprise Service vulnerabilities
3 vulnerabilities
Known vulnerabilities in Blackberry Enterprise Service, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2016-3128blackberryenterprise_service
EPSS score1.87%
A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES.CVE-2016-3130blackberryenterprise_serviceEPSS score2.06%
An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt.CVE-2017-3894blackberrybes12+2EPSS score0.85%
A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows attackers to execute actions in the context of a Management Console administrator by uploading a malicious script and then persuading a target administrator to view the specific location of the malicious script within the Management Console.