Lucene search

[email protected]CVE-2011-0286

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-0286

2022-10-0316:15:21

CWE-79

[email protected]

web.nvd.nist.gov

cve-2011-0286

cross-site scripting

xss

blackberry web desktop manager

bes

blackberry enterprise server

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.8%

JSON

Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, and BlackBerry Enterprise Server Express software 5.0.1 and 5.0.2, allows remote attackers to inject arbitrary web script or HTML via the displayErrorMessage parameter in a ManageDevices action.

Affected configurations

NVD

Node

rimblackberry_enterprise_serverMatch5.0.0

rimblackberry_enterprise_serverMatch5.0.1

rimblackberry_enterprise_serverMatch5.0.2

rimblackberry_enterprise_serverMatch5.0.3

rimblackberry_enterprise_server_expressMatch5.0.1

rimblackberry_enterprise_server_expressMatch5.0.2

CPENameOperatorVersion
rim:blackberry_enterprise_serverrim blackberry enterprise servereq5.0.0
rim:blackberry_enterprise_serverrim blackberry enterprise servereq5.0.1
rim:blackberry_enterprise_serverrim blackberry enterprise servereq5.0.2
rim:blackberry_enterprise_serverrim blackberry enterprise servereq5.0.3
rim:blackberry_enterprise_server_expressrim blackberry enterprise server expresseq5.0.1
rim:blackberry_enterprise_server_expressrim blackberry enterprise server expresseq5.0.2

CPE	Name	Operator	Version
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	5.0.0
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	5.0.1
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	5.0.2
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	5.0.3
rim:blackberry_enterprise_server_express	rim blackberry enterprise server express	eq	5.0.1
rim:blackberry_enterprise_server_express	rim blackberry enterprise server express	eq	5.0.2

References

secunia.com/advisories/44183

securitytracker.com/id?1025356

www.blackberry.com/btsc/KB26296

www.cybsec.com/vuln/CYBSEC_Advisory_2011_0401_Cross_Site_Scripting_XSS_in_Blackberry_WebDesktop.pdf

www.securityfocus.com/bid/47324

www.vupen.com/english/advisories/2011/0971

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.8%

JSON

Related for CVE-2011-0286

cvelist1 prion1 nvd1 nessus1