PT-2016-4920
CVE-2016-1916
·
Publicado
2016-04-22
·
Atualizado
2016-12-03
Descrição por
CVSS 3.1
5.4
MédiaMétricasAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
BlackBerry Enterprise Server (BES) versions prior to 12.4.1
Description
A cross-site scripting (XSS) issue exists in the Management Console of the affected software, allowing remote authenticated users with basic administrative access to inject arbitrary web script or HTML by creating a crafted policy. This leads to improper rendering on a certain Export IT screen.
Recommendations
For versions prior to 12.4.1, update to version 12.4.1 or later to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾