PT-2016-4920
CVE-2016-1916
·
تاريخ النشر
2016-04-22
·
تاريخ التحديث
2016-12-03
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
BlackBerry Enterprise Server (BES) versions prior to 12.4.1
Description
A cross-site scripting (XSS) issue exists in the Management Console of the affected software, allowing remote authenticated users with basic administrative access to inject arbitrary web script or HTML by creating a crafted policy. This leads to improper rendering on a certain Export IT screen.
Recommendations
For versions prior to 12.4.1, update to version 12.4.1 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾