Skip to content
OpenAdvisories
Unscored CVE-2018-8888 EUVD-2018-20496GHSA-6mxf-mv9r-942p

A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an …

Published Dec 20, 2018 · Updated Aug 5, 2024 · Assigned by blackberry

Description

A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.

Affected products

VendorProductAffectedFixed
BlackBerry BlackBerry UEM 12.9.1 and earlier —

References