Cross-site Request Forgery

OpenShift is susceptible to Cross-Site Request Forgery CSRF attacks. It has a flaw in management console openshift console/app/controllers/applicationcontroller.rb, allowing the attacker to steal the authenticated user session...

BlackBerry Unified Endpoint Manager Cross-Site Scripting Vulnerability

BlackBerry Unified Endpoint Manager UEM is a unified endpoint management solution from BlackBerry Canada. The solution is used to manage endpoint devices and view their access. A security vulnerability exists in BlackBerry UEM. An attacker could exploit this vulnerability to be able to store scri...

BlackBerry Unified Endpoint Manager Cross-Site Scripting Vulnerability (CNVD-2019-39170)

BlackBerry Unified Endpoint Manager UEM is a unified endpoint management solution from BlackBerry Canada. The solution is used to manage endpoint devices and view their access.A security vulnerability exists in BlackBerry UEM. An attacker could exploit this vulnerability to make changes to UEM...

CVE-2018-8891

Multiple stored cross-site scripting XSS vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

CVE-2018-8892

A cross-site request forgery CSRF vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator...

CVE-2018-8892

A cross-site request forgery CSRF vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator...

CVE-2018-8892

A cross-site request forgery CSRF vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator...

CVE-2018-8888

A stored cross-site scripting XSS vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

CVE-2018-8891

Multiple stored cross-site scripting XSS vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

CVE-2018-8891

Multiple stored cross-site scripting XSS vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

Cross site scripting

Multiple stored cross-site scripting XSS vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator...

CVE-2018-8888

A stored cross-site scripting XSS vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

CVE-2018-8891

CVE-2018-8891 affects BlackBerry UEM’s Management Console. It involves stored cross-site scripting (XSS) vulnerabilities in versions earlier than 12.9.1, allowing an attacker to store script commands that could run in the context of another Management Console administrator. The connected sources ...

CVE-2018-8891

Multiple stored cross-site scripting XSS vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

CVE-2018-8888

BlackBerry UEM Management Console is affected by a stored XSS in versions earlier than 12.10.0. The vulnerability allows an attacker to store script commands that can later run in the context of another Management Console administrator. Root cause: stored XSS in the console input handling. No rem...

CVE-2018-8892

A cross-site request forgery CSRF vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator...

CVE-2018-8888

A stored cross-site scripting XSS vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

CVE-2018-8892

CVE-2018-8892 describes a cross-site request forgery (CSRF) in the BlackBerry UEM Management Console. Affected product: BlackBerry Unified Endpoint Management (UEM) Management Console. Affected versions: earlier than 12.9.1. Root cause: CSRF allowing changes to UEM settings within an authenticate...

The management console is unavailable because a root certificate is missing

After upgrading StoreFront from 3.9 to 3.12 CU1 - StoreFront console fails with 'The management console is unavailable because a root certificate is missing'...