Approved changes feed: RSS · Atom

cpe:2.3:a:blackberry:enterprise_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBlackberry (248c4d29-a9fb-529f-b35a-888413af537f)
ProductEnterprise Server (ee0826d5-1656-5c83-8d0b-2b2149843560)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-3126 vulnerable 2026-06-03 14:35:45.250427 Details available
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Published: 2016-04-22T18:00:00.000Z
Updated: 2024-08-05T23:47:57.214Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1918 vulnerable 2026-06-03 14:35:36.064807 Details available
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1917.
Published: 2016-04-22T18:00:00.000Z
Updated: 2024-08-05T23:10:40.377Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1917 vulnerable 2026-06-03 14:35:36.064503 Details available
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1918.
Published: 2016-04-22T18:00:00.000Z
Updated: 2024-08-05T23:10:40.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1916 vulnerable 2026-06-03 14:35:36.064093 Details available
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a certain Export IT screen.
Published: 2016-04-22T18:00:00.000Z
Updated: 2024-08-05T23:10:40.263Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.