Input validation

2020-10-1414:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker to potentially cause a Denial of Service (DoS) of the UEM Core service.

CPENameOperatorVersion
unified_endpoint_managereq12.11.1 quick-fix1
unified_endpoint_managereq12.11.1 quick-fix2
unified_endpoint_managereq12.11.1 quick-fix3
unified_endpoint_managereq12.12.197
unified_endpoint_managereq12.12.1a quick-fix2
unified_endpoint_managereq12.12.1a quick-fix1
unified_endpoint_managereq12.13.0
unified_endpoint_managerle12.11.1

Name	Operator	Version
unified_endpoint_manager	eq	12.11.1 quick-fix1
unified_endpoint_manager	eq	12.11.1 quick-fix2
unified_endpoint_manager	eq	12.11.1 quick-fix3
unified_endpoint_manager	eq	12.12.197
unified_endpoint_manager	eq	12.12.1a quick-fix2
unified_endpoint_manager	eq	12.12.1a quick-fix1
unified_endpoint_manager	eq	12.13.0
unified_endpoint_manager	le	12.11.1

References

support.blackberry.com/kb/articleDetail?articleNumber=000068112