Improper Input Validation in the Networking Stack of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or a Denial-of-Service condition.
Max CVSS
7.1
EPSS Score
0.04%
Published
2023-11-14
Updated
2023-11-21
An Information Disclosure vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially gain access to a victim's web history.
Max CVSS
5.3
EPSS Score
0.08%
Published
2021-05-13
Updated
2022-07-12
An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server.
Max CVSS
10.0
EPSS Score
0.50%
Published
2020-08-12
Updated
2021-07-21
An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space.
Max CVSS
7.8
EPSS Score
0.04%
Published
2019-07-12
Updated
2021-07-21
An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user.
Max CVSS
7.5
EPSS Score
0.17%
Published
2018-10-12
Updated
2020-07-15
An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who has legitimate access to BlackBerry Workspaces to gain access to another user's workspace by making multiple login requests to the server.
Max CVSS
8.8
EPSS Score
0.08%
Published
2017-08-09
Updated
2017-08-24
An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for server-side applications by crafting a request for specific files.
Max CVSS
7.5
EPSS Score
0.18%
Published
2017-10-16
Updated
2017-11-08
In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an information disclosure vulnerability in the default configuration of the QNX SDP could allow an attacker to gain information relating to memory layout that could be used in a blended attack by executing commands targeting procfs resources.
Max CVSS
7.5
EPSS Score
0.17%
Published
2017-11-14
Updated
2017-11-30
An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt.
Max CVSS
8.1
EPSS Score
0.76%
Published
2017-01-13
Updated
2017-02-03
An information disclosure vulnerability in the logging implementation of BlackBerry Good Control Server versions earlier than 2.3.53.62 allows remote attackers to gain and use logged encryption keys to access certain resources within a customer's Good deployment by gaining access to certain diagnostic log files through either a valid logon or an unrelated compromise of the server.
Max CVSS
7.5
EPSS Score
0.14%
Published
2017-03-03
Updated
2017-03-09
BlackBerry PlayBook before 2.1 has an Information Disclosure Vulnerability via a Web browser component error
Max CVSS
6.5
EPSS Score
0.35%
Published
2020-02-10
Updated
2020-02-14
The BlackBerry PlayBook service on the Research In Motion (RIM) BlackBerry PlayBook tablet with software before 1.0.8.6067 allows local users to gain privileges via a crafted configuration file in a backup archive.
Max CVSS
7.2
EPSS Score
0.04%
Published
2011-12-08
Updated
2017-08-17
12 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!