Blackberry : Security Vulnerabilities, CVEs, Published In 2015
The Management Console in BlackBerry Enterprise Server (BES) 12 before 12.2 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site, related to a "cross frame scripting" issue.
Max CVSS
4.3
EPSS Score
0.15%
Published
2015-11-19
Updated
2016-12-07
mc_demux_mp4_ds.ax in an unspecified third-party codec demux in BlackBerry Link before 1.2.3.53 with installer before 1.1.0.22 allows remote attackers to execute arbitrary code via a crafted MP4 file.
Max CVSS
6.8
EPSS Score
3.59%
Published
2015-07-20
Updated
2017-09-22
2 vulnerabilities found