Blackberry Unified Endpoint Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Blackberry Unified Endpoint Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2018-8890 — CVSS 7.5 (high): An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over…
• CVE-2018-8892 — CVSS 6.5 (medium): A cross-site request forgery (CSRF) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an…
• CVE-2017-3894 — CVSS 6.1 (medium): A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier…
• CVE-2017-17442 — CVSS 6.1 (medium): In BlackBerry UEM Management Console version 12.7.1 and earlier, a reflected cross-site scripting vulnerability that could allow an…
• CVE-2020-6933 — CVSS 5.5 (medium): An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1…
• CVE-2018-8888 — CVSS 4.8 (medium): A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an…
• CVE-2018-8891 — CVSS 4.8 (medium): Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could…