CVE-2011-0286

2022-10-0316:15:21

mitre

www.cve.org

blackberry enterprise server

cross-site scripting

remote attackers

5.7 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.8%

JSON

Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, and BlackBerry Enterprise Server Express software 5.0.1 and 5.0.2, allows remote attackers to inject arbitrary web script or HTML via the displayErrorMessage parameter in a ManageDevices action.