PT-2018-18691 · Blackberry · Blackberry Uem

Published 2018-12-20 · Updated 2019-01-03 · CVE-2018-8888

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions BlackBerry UEM versions prior to 12.10.0

Description A stored cross-site scripting (XSS) issue in the Management Console could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.

Recommendations For versions prior to 12.10.0, update to version 12.10.0 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-8888

Affected Products

Blackberry Uem

References · 3

• http://support.blackberry.com/kb/articleDetail?articleNumber=000054162 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-8888 · Security Note
• https://osv.dev/vulnerability/CVE-2018-8888 · Vendor Advisory