CVE-2017-3894

🗓️ 10 May 2017 16:00:00Reported by blackberryType

Stored XSS vuln in BlackBerry UEM & BES12 allows admin actions via malicious script upload

Reporter	Title	Published	Views	Family All 6
CNVD	BlackBerry Unified Endpoint Manager and BES12 Management Console Cross-Site Scripting Vulnerability	16 May 201700:00	–	cnvd
Cvelist	CVE-2017-3894	10 May 201716:00	–	cvelist
EUVD	EUVD-2017-13011	7 Oct 202500:30	–	euvd
NVD	CVE-2017-3894	10 May 201716:29	–	nvd
OSV	CVE-2017-3894	10 May 201716:29	–	osv
Prion	Cross site scripting	10 May 201716:29	–	prion

NVD

Node

blackberry enterprise_serviceMatch12.0

blackberry enterprise_serviceMatch12.0.1

blackberry enterprise_serviceMatch12.1

blackberry enterprise_serviceMatch12.1.0

blackberry enterprise_serviceMatch12.1.1

blackberry enterprise_serviceMatch12.2.0

blackberry enterprise_serviceMatch12.2.1

blackberry enterprise_serviceMatch12.3.0

blackberry enterprise_serviceMatch12.3.1

blackberry enterprise_serviceMatch12.4.0

blackberry enterprise_serviceMatch12.4.1

blackberry enterprise_serviceMatch12.5.0

blackberry enterprise_serviceMatch12.5.1

blackberry enterprise_serviceMatch12.5.2

blackberry unified_endpoint_managerRange≤12.6.1

[
  {
    "product": "Unified Endpoint Manager",
    "vendor": "BlackBerry",
    "versions": [
      {
        "status": "affected",
        "version": "before 12.6.2"
      }
    ]
  },
  {
    "product": "BES12",
    "vendor": "BlackBerry",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1038465
securityfocus	www.securityfocus.com/bid/98552
support	www.support.blackberry.com/kb/articleDetail

13 May 2026 00:24Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 36.1

EPSS0.00356

CWE-79