Summary
Ein Angreifer kann mehrere Schwachstellen in BlackBerry UEM Management Console ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.
Product
Blackberry stellt mobile Endgeräte sowie zugehörige Management-Tools zur Verfügung
Vulnerabilities 2
-
High 8.6
Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM
Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting (XSS). This issue affects UEM: 12.23.0 QF8 or earlier.
-
Medium 5.9
Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM
An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.
Revision history
-
#1
Initiale Fassung
References
-
Blackberry Security Advisory vom 2026-07-28
https://support.blackberry.com/pkb/s/article/141208
-
GitHub Advisory Database vom 2026-07-28
https://github.com/advisories/GHSA-XXHJ-C62M-3WGM
-
GitHub Advisory Database vom 2026-07-28
https://github.com/advisories/GHSA-324M-XXRV-V73Q
-
EU Vulnerability Database vom 2026-07-28
https://euvd.enisa.europa.eu/enisa/EUVD-2026-49897
-
EU Vulnerability Database vom 2026-07-28
https://euvd.enisa.europa.eu/enisa/EUVD-2026-49898