Blackberry Enterprise Server — known CVE vulnerabilities

Every CVE whose affected-product data names Blackberry Enterprise Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2008-3246 — CVSS 9.3 (critical): Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before…
• CVE-2016-3126 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote…
• CVE-2016-1917 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote…
• CVE-2016-1918 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote…
• CVE-2016-1916 — CVSS 5.4 (medium): Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote…
• CVE-2014-1467 — CVSS 5.0 (medium): BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise…
• CVE-2014-1469 — CVSS 4.9 (medium): BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext credentials during exception…
• CVE-2015-4112 — CVSS 4.3 (medium): The Management Console in BlackBerry Enterprise Server (BES) 12 before 12.2 does not properly restrict use of FRAME elements, which makes…