Blackberry: >> Unified Endpoint Manager >> 12.9.1 Security Vulnerabilities
An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker to potentially cause a Denial of Service (DoS) of the UEM Core service.
CVSS Score
5.5
EPSS Score
0.001
Published
2020-10-14
A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.
CVSS Score
4.8
EPSS Score
0.003
Published
2018-12-20