CVE-2016-3130

CVE-2016-3130 describes an information-disclosure vulnerability in the Core and Management Console of BlackBerry Enterprise Server (BES) . Affected: BES versions 12 through 12.5.2 . The issue allows remote attackers to obtain credentials (local or domain) of an administrator or user by sniffing t...

CVE-2016-3126

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-1916

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a...

Cross site scripting

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-3126

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-1917

CVE-2016-1917 (BES Management Console XSS) : The vulnerability affects BlackBerry Enterprise Server (BES) 12.x, specifically the Management Console, prior to version 12.4.1. It is an XSS flaw caused by improper validation, allowing a remote attacker to inject arbitrary web script or HTML via a cr...

CVE-2016-1916

CVE-2016-1916 affects BlackBerry Enterprise Server (BES) Management Console in BES 12.x

CVE-2016-1916

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a...

CVE-2016-1918

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1917...