Описание
Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.
Ссылки
- MitigationVendor Advisory
- MitigationVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 12.9.1 (исключая)
cpe:2.3:a:blackberry:unified_endpoint_manager:*:*:*:*:*:*:*:*
EPSS
Процентиль: 51%
0.00277
Низкий
4.8 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 4.8
github
больше 3 лет назад
Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.
EPSS
Процентиль: 51%
0.00277
Низкий
4.8 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79