CVE-2021-22029

CVE-2021-22029 affects VMware Workspace ONE UEM REST API. A malicious actor with access to /API/system/admins/session can cause API denial of service due to improper rate limiting. The NVD lists CVSSv3 base 7.5 (HIGH); VMware’s advisory VMSA-2021-0017 notes a MODERATE severity with CVSSv3 up to 5...

CVE-2021-22029

VMware Workspace ONE UEM REST API contains a denial of service vulnerability. A malicious actor with access to /API/system/admins/session could cause an API denial of service due to improper rate limiting...

VMware Workspace ONE UEM console DoS (VMSA-2021-0017)

According to its self-reported version, the install of Workspace ONE UEM console running on the remote host is 2001 prior to 20.1.0.33, 2005 prior to 20.5.0.51, 2008 prior to 20.8.0.32, 2011 prior to 20.11.0.30, 2102 prior to 21.2.0.14, or 2105 prior to 21.5.0.2. It is, therefore, affected by...

VMware Workspace ONE UEM console patches address a denial of service vulnerability (CVE-2021-22029)

3. Advisory Details VMware Workspace ONE UEM REST API contains a denial of service vulnerability. VMware has evaluated this issue to be of 'Moderate' severity with a maximum CVSSv3 base score of 5.3...

CVE-2021-22153

A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM versions 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially cause the spreadsheet application to run commands on the victim’s local machine with the authority of th...

CVE-2021-22152

A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM versions 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user connections...

CVE-2021-22153

A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM versions 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially cause the spreadsheet application to run commands on the victim’s local machine with the authority of th...

CVE-2021-22152

A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM versions 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user connections...

Information disclosure

An Information Disclosure vulnerability in the Management Console component of BlackBerry UEM versions 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially gain access to a victim's web history...

Remote code execution

A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM versions 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially cause the spreadsheet application to run commands on the victim’s local machine with the authority of th...

CVE-2021-22153

A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM versions 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially cause the spreadsheet application to run commands on the victim’s local machine with the authority of th...

Input validation

A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM versions 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user connections...

CVE-2021-22152

A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM versions 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user connections...

CVE-2021-22154

CVE-2021-22154 is an information disclosure vulnerability in the BlackBerry UEM Management Console. Affected product versions are BlackBerry UEM 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier. The vulnerability could allow an attacker to potentially access a victim’s web history. Connected ...

CVE-2021-22154

An Information Disclosure vulnerability in the Management Console component of BlackBerry UEM versions 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially gain access to a victim's web history...

CVE-2021-22153

A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM versions 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially cause the spreadsheet application to run commands on the victim’s local machine with the authority of th...

CVE-2021-22153

CVE-2021-22153 describes a Remote Code Execution vulnerability in the BlackBerry UEM Management Console . Affected versions are BlackBerry UEM 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier. Exploitation could allow an attacker to cause the spreadsheet application to run commands on the vic...

CVE-2021-22152

CVE-2021-22152 describes a Denial of Service in the BlackBerry UEM Management Console caused by improper input validation. Affected software: BlackBerry UEM, versions 12.13.1 QF2 and earlier, and 12.12.1a QF6 and earlier. The vulnerability could allow an attacker with local access to prevent new ...

CVE-2021-22152

A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM versions 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user connections...

BlackBerry UEM

Vulnerabilities have been fixed in BlackBerry UEM. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to system data BlackBerry categorizes these...