Approved changes feed: RSS · Atom

cpe:2.3:a:rim:blackberry_enterprise_server:4.1:*:*:*:*:*:*:*

part: a version: 4.1 update: *

VendorRim (6e3c5c37-baa7-52a9-8ed4-b8a78bc306ba)
ProductBlackberry Enterprise Server (c9210820-bf68-5d86-98ee-ef8f45d54dc4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-2601 vulnerable 2026-06-03 14:30:26.386549 Details available
Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted PDF document.
Published: 2010-10-14T17:00:00.000Z
Updated: 2024-09-16T22:30:05.763Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2646 vulnerable 2026-06-03 14:29:42.295060 Details available
Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.6 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246 and CVE-2009-0219.
Published: 2009-07-30T19:00:00.000Z
Updated: 2024-09-16T20:01:46.004Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0307 vulnerable 2026-06-03 14:29:23.524934 Details available
Cross-site scripting (XSS) vulnerability in the "Customize Statistics Page" (admin/statistics/ConfigureStatistics) in the MDS Connection Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) before 4.1.6 MR5 allows remote attackers to inject arbitrary web script or HTML via the (1) customDate, (2) interval, (3) lastCustomInterval, (4) lastIntervalLength, (5) nextCustomInterval, (6) nextIntervalLength, (7) action, (8) delIntervalIndex, (9) addStatIndex, (10) delStatIndex, and (11) referenceTime parameters.
Published: 2009-04-22T18:00:00.000Z
Updated: 2024-08-07T04:31:25.613Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3483 vulnerable 2026-06-03 14:28:16.150619 Details available
Research in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation of arbitrary third-party applications on BlackBerry devices, which might facilitate loading of malware.
Published: 2007-06-28T20:00:00.000Z
Updated: 2024-08-07T14:21:35.533Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.