Vulnerability Details CVE-2026-18084
Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting (XSS).
This issue affects UEM: 12.23.0 QF8 or earlier.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 4.6%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2026-18084
-
cpe:2.3:a:blackberry:unified_endpoint_manager:12.22.1
-
cpe:2.3:a:blackberry:unified_endpoint_manager:12.23.0