CVE-2011-0286

Опубликовано: 18 апр. 2011

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, and BlackBerry Enterprise Server Express software 5.0.1 and 5.0.2, allows remote attackers to inject arbitrary web script or HTML via the displayErrorMessage parameter in a ManageDevices action.

Ссылки

http://secunia.com/advisories/44183
Vendor Advisory
http://securitytracker.com/id?1025356
http://www.blackberry.com/btsc/KB26296
Vendor Advisory
http://www.cybsec.com/vuln/CYBSEC_Advisory_2011_0401_Cross_Site_Scripting_XSS_in_Blackberry_WebDesktop.pdf
Exploit
http://www.securityfocus.com/bid/47324
http://www.vupen.com/english/advisories/2011/0971
Vendor Advisory
http://secunia.com/advisories/44183
Vendor Advisory
http://securitytracker.com/id?1025356
http://www.blackberry.com/btsc/KB26296
Vendor Advisory
http://www.cybsec.com/vuln/CYBSEC_Advisory_2011_0401_Cross_Site_Scripting_XSS_in_Blackberry_WebDesktop.pdf
Exploit
http://www.securityfocus.com/bid/47324
http://www.vupen.com/english/advisories/2011/0971
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:rim:blackberry_enterprise_server:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:rim:blackberry_enterprise_server:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:rim:blackberry_enterprise_server:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:rim:blackberry_enterprise_server:5.0.3:*:*:*:*:*:*:*

cpe:2.3:a:rim:blackberry_enterprise_server_express:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:rim:blackberry_enterprise_server_express:5.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.00499

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-m85q-5qpg-g6vh

github

больше 3 лет назад