PT-2018-18691 · Blackberry · Blackberry Uem

Publicado 2018-12-20 · Atualizado 2019-01-03 · CVE-2018-8888

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions BlackBerry UEM versions prior to 12.10.0

Description A stored cross-site scripting (XSS) issue in the Management Console could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.

Recommendations For versions prior to 12.10.0, update to version 12.10.0 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-8888

Produtos afetados

Blackberry Uem

Referências · 3

• http://support.blackberry.com/kb/articleDetail?articleNumber=000054162 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8888 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-8888 · Aviso do Fabricante