CVE-2016-1917

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1918...

CVE-2016-1916

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a...

Cross site scripting

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-1916

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a...

CVE-2016-1917

CVE-2016-1917 (BES Management Console XSS) : The vulnerability affects BlackBerry Enterprise Server (BES) 12.x, specifically the Management Console, prior to version 12.4.1. It is an XSS flaw caused by improper validation, allowing a remote attacker to inject arbitrary web script or HTML via a cr...

CVE-2016-3126

CVE‑2016‑3126 is a cross‑site scripting (XSS) vulnerability in the BlackBerry Enterprise Server (BES) Management Console. Affects BES 12.x before 12.4.1; an attacker can craft a URL to inject arbitrary script/HTML into a user’s browser session. Impact is client‑side script execution in the authen...

CVE-2016-1918

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1917...

CVE-2016-1916

CVE-2016-1916 affects BlackBerry Enterprise Server (BES) Management Console in BES 12.x

CVE-2016-3126

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-1918

CVE-2016-1918 affects BlackBerry Enterprise Server (BES) 12.x Management Console prior to 12.4.1. A cross-site scripting (XSS) vulnerability exists that allows a remote attacker to inject arbitrary web script or HTML via a crafted URL, potentially impacting users’ browser sessions. This CVE is li...

BlackBerry Enterprise Service Multiple Vulnerabilities (BSRT-2016-001)

According to its version, the BlackBerry Enterprise Service BES install on the remote host is older than 12.4, it is, therefore, affected by the following vulnerabilities: - A SQL injection vulnerability exists due to improper sanitization of user-supplied input to the 'ImageName' parameter in th...

CVE-2015-4112

CVE-2015-4112 affects the BlackBerry Enterprise Server (BES) Management Console. The issue arises because the console does not properly restrict the use of FRAME elements, enabling remote attackers to perform clickjacking via a crafted website (cross-frame scripting). Affects BES 12 before 12.2; ...

BlackBerry the company's multiple products by FREAK vulnerability-vulnerability warning-the black bar safety net

The BlackBerry company recently issued a notice, saying that its multiple product lines by the FREAK SSL vulnerability, including multiple versions of the BlackBerryoperating system, Enterprise Server and the BlackBerry communication tools. It is worth mentioning that BlackBerry is the initiative...

CVE-2014-9596

CVE-2014-9596 affects Panasonic Arbitrator Back-End Server (BES) on two product lines: BES MK 2.0 VPU prior to 9.3.1 build 4.08.003.0 and MK 3.0 VPU prior to 9.3.1 build 5.06.000.0. When either USB Wi‑Fi/Direct LAN (MK 2.0) or Embedded Wi‑Fi/Direct LAN (MK 3.0) is enabled, the component does not ...

Panasonic Arbitrator Back-End Server (BES) uses unencrypted communication

Overview Panasonic Arbitrator Back-End Server BES uses an unencrypted channel to transmit data. Description CWE-319: Cleartext Transmission of Sensitive Information Panasonic Arbitrator Back-End Server BES uses an unencrypted channel to transmit data between the client and server. It has been...

BES-CMS 0.4/0.5 message.php File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The...

BES-CMS 0.4/0.5 start.php File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The...

BES-CMS 0.4/0.5 index.inc.php File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The...

BES-CMS 0.4/0.5 hacking.php File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The...

BES-CMS 0.4/0.5 members/index.inc.php File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The...