Blackberry Enterprise Service (BES) 12.3.1
Approved changes feed: RSS · Atom
cpe:2.3:a:blackberry:enterprise_service:12.3.1:*:*:*:*:*:*:*
part: a version: 12.3.1 update: *
| Vendor | Blackberry (248c4d29-a9fb-529f-b35a-888413af537f) |
|---|---|
| Product | Enterprise Service (70efe918-c3cf-5461-b4b5-8149c3be0244) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-3894 |
vulnerable | 2026-06-03 14:37:17.554273 |
Details available
A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows attackers to execute actions in the context of a Management Console administrator by uploading a malicious script and then persuading a target administrator to view the specific location of the malicious script within the Management Console.
Published: 2017-05-10T16:00:00.000Z
Updated: 2024-08-05T14:39:41.190Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3130 |
vulnerable | 2026-06-03 14:35:45.264621 |
Details available
An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt.
Published: 2017-01-13T09:00:00.000Z
Updated: 2024-08-05T23:47:57.205Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3128 |
vulnerable | 2026-06-03 14:35:45.259012 |
Details available
A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES.
Published: 2017-01-13T09:00:00.000Z
Updated: 2024-08-05T23:47:57.214Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.