Blackberry Unified Endpoint Manager
By the Year
In 2024 there have been 0 vulnerabilities in Blackberry Unified Endpoint Manager . Unified Endpoint Manager did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 0 | 0.00 |
| 2020 | 1 | 5.50 |
| 2019 | 0 | 0.00 |
| 2018 | 5 | 5.94 |
It may take a day or so for new Unified Endpoint Manager vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Blackberry Unified Endpoint Manager Security Vulnerabilities
An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could
CVE-2020-6933
5.5 - Medium
- October 14, 2020
An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker to potentially cause a Denial of Service (DoS) of the UEM Core service.
Improper Input Validation
A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands
CVE-2018-8888
4.8 - Medium
- December 20, 2018
A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.
XSS
Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands
CVE-2018-8891
4.8 - Medium
- December 20, 2018
Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.
XSS
A cross-site request forgery (CSRF) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could
CVE-2018-8892
6.5 - Medium
- December 20, 2018
A cross-site request forgery (CSRF) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator.
Session Riding
An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could
CVE-2018-8890
7.5 - High
- October 12, 2018
An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user.
Information Disclosure
In BlackBerry UEM Management Console version 12.7.1 and earlier, a reflected cross-site scripting vulnerability
CVE-2017-17442
6.1 - Medium
- March 13, 2018
In BlackBerry UEM Management Console version 12.7.1 and earlier, a reflected cross-site scripting vulnerability that could allow an attacker to execute script commands in the context of the affected UEM Management Console account by crafting a malicious link and then persuading a user with legitimate access to the Management Console to click on the malicious link.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Blackberry Unified Endpoint Manager or by Blackberry? Click the Watch button to subscribe.
