blackberry Vulnerability Advisory Catalog

Total 76 security vulnerabilities recorded for blackberry software and firmware.

← Back to All Vendors
Component: good_control_server

An information disclosure vulnerability in the logging implementation of BlackBerry Good Control Server versions earlier than 2.3.53.62 allows remote ...

📅 2017-03-03
CVSS 7.5 Dossier →
CVE-2017-3890 MEDIUM
Component: appliance-x

A reflected cross-site scripting vulnerability in the BlackBerry WatchDox Server components Appliance-X, version 1.8.1 and earlier, and vAPP, versions...

📅 2017-01-13
CVSS 6.1 Dossier →
Component: enterprise_service

An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attac...

📅 2017-01-13
CVSS 8.1 Dossier →
Component: enterprise_service

A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device ...

📅 2017-01-13
CVSS 8.2 Dossier →
CVE-2016-3129 MEDIUM
Component: good_enterprise_mobility_server

A remote shell execution vulnerability in the BlackBerry Good Enterprise Mobility Server (GEMS) implementation of the Apache Karaf command shell in GE...

📅 2016-12-16
CVSS 6.6 Dossier →
CVE-2016-3126 MEDIUM
Component: enterprise_server

Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to i...

📅 2016-04-22
CVSS 6.1 Dossier →
CVE-2016-1918 MEDIUM
Component: enterprise_server

Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to i...

📅 2016-04-22
CVSS 6.1 Dossier →
CVE-2016-1917 MEDIUM
Component: enterprise_server

Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to i...

📅 2016-04-22
CVSS 6.1 Dossier →
CVE-2016-1916 MEDIUM
Component: enterprise_server

Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote authenticated ...

📅 2016-04-22
CVSS 5.4 Dossier →
CVE-2015-4112 UNKNOWN
Component: enterprise_server

The Management Console in BlackBerry Enterprise Server (BES) 12 before 12.2 does not properly restrict use of FRAME elements, which makes it easier fo...

📅 2015-11-19
CVSS 4.3 Dossier →
CVE-2015-4111 UNKNOWN
Component: blackberry_link

mc_demux_mp4_ds.ax in an unspecified third-party codec demux in BlackBerry Link before 1.2.3.53 with installer before 1.1.0.22 allows remote attackers...

📅 2015-07-20
CVSS 6.8 Dossier →
CVE-2014-6611 UNKNOWN
Component: blackberry_world

The BlackBerry World app before 5.0.0.262 on BlackBerry 10 OS 10.2.0, before 5.0.0.263 on BlackBerry 10 OS 10.2.1, and before 5.1.0.53 on BlackBerry 1...

📅 2014-10-25
CVSS 4.3 Dossier →
CVE-2014-2388 UNKNOWN
Component: blackberry_os

The Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 devices does not enforce the password requirement for...

📅 2014-08-18
CVSS 6.1 Dossier →
CVE-2014-1469 UNKNOWN
Component: blackberry_enterprise_service

BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext credentials during exception handling, which...

📅 2014-08-18
CVSS 4.9 Dossier →
CVE-2014-2389 UNKNOWN
Component: blackberry_os

Stack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10 devices with software 10.1.0.2312, when developer-mode has...

📅 2014-04-12
CVSS 9.3 Dossier →
CVE-2014-2534 UNKNOWN
Component: qnx_neutrino_rtos

/sbin/pppoectl in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to obtain sensitive information by reading "bad parameter" lines in ...

📅 2014-03-18
CVSS 4.9 Dossier →
CVE-2014-2533 UNKNOWN
Component: qnx_neutrino_rtos

/sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arbitrary program name as a comma...

📅 2014-03-18
CVSS 7.2 Dossier →
CVE-2014-1467 UNKNOWN
Component: blackberry_enterprise_service

BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise Server Expr...

📅 2014-02-14
CVSS 5.0 Dossier →
CVE-2013-3694 UNKNOWN
Component: blackberry_link

BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not require authentication for remote file-access folders, which...

📅 2013-11-18
CVSS 6.8 Dossier →
CVE-2013-6798 UNKNOWN
Component: blackberry_link

BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not properly determine the user account for execution of Peer Ma...

📅 2013-11-18
CVSS 5.8 Dossier →
CVE-2013-3693 UNKNOWN
Component: blackberry_enterprise_service

The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly restrict access to the JBoss Remo...

📅 2013-10-11
CVSS 7.9 Dossier →
CVE-2013-3692 UNKNOWN
Component: blackberry_os

BlackBerry 10 OS before 10.0.10.648 on BlackBerry Z10 smartphones uses weak permissions for a BlackBerry Protect object, which allows physically proxi...

📅 2013-07-13
CVSS 6.2 Dossier →
CVE-2013-2688 UNKNOWN
Component: qnx_software_development_platform

Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause...

📅 2013-07-12
CVSS 5.4 Dossier →
CVE-2013-2687 UNKNOWN
Component: qnx_momentics_tool_suite

Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite thro...

📅 2013-07-12
CVSS 7.8 Dossier →
Page 3 of 4 (76 Total Records)