CVE-2015-4112

CVE-2015-4112 affects the BlackBerry Enterprise Server (BES) Management Console. The issue arises because the console does not properly restrict the use of FRAME elements, enabling remote attackers to perform clickjacking via a crafted website (cross-frame scripting). Affects BES 12 before 12.2; ...

CVE-2015-4112

The Management Console in BlackBerry Enterprise Server BES 12 before 12.2 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site, related to a "cross frame scripting" issue...