CVE-2017-17442: blackberry uem management console Cross-site Scripting
Vulnerability summary
CVE-2017-17442 is a medium (CVSS 6.1) Cross-site Scripting vulnerability in blackberry uem management console. EPSS estimates a 0.91% chance of exploitation in the next 30 days, higher than 59.3% of scored vulnerabilities.
Timeline
- 13-03-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
In BlackBerry UEM Management Console version 12.7.1 and earlier, a reflected cross-site scripting vulnerability that could allow an attacker to execute script commands in the context of the affected UEM Management Console account by crafting a malicious link and then persuading a user with legitimate access to the Management Console to click on the malicious link.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.91%
Chance of exploitation in the next 30 days
Percentile
59%
Versus all other CVEs
30-day change
0.00 pp
From 0.91% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Blackberry2 products
- uem management console12.7.1 and earlier
- unified_endpoint_manager≤ 12.7.1
1 vendor · 2 products