Unscored severity · published Apr 18, 2011
CVE-2011-0286
Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, and BlackBerry Enterprise Server Express software 5.0.1 and 5.0.2, allows remote attackers to inject arbitrary web script or HTML via the displayErrorMessage parameter in a ManageDevices action.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BE
Blackberry Enterprise Server · Rim
5.0.0; 5.0.1; 5.0.2; 5.0.3 · source: NVD
BE
Blackberry Enterprise Server Express · Rim
5.0.1; 5.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0286
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0286
Vendor Advisory
http://secunia.com/advisories/44183
securitytracker.com
http://securitytracker.com/id?1025356
Vendor Advisory
http://www.blackberry.com/btsc/KB26296
Exploit
http://www.cybsec.com/vuln/CYBSEC_Advisory_2011_0401_Cross_Site_Scripting_XSS_in_Blackberry_WebDesktop.pdf
www.securityfocus.com
http://www.securityfocus.com/bid/47324
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0971
More from Blackberry Enterprise Server
–
CVE-2011-0290
The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote…
–
CVE-2011-0287
Unspecified vulnerability in the BlackBerry Administration API in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 5.0.1 through 5.0.3, and BlackBerry…
–
CVE-2010-2604
Multiple buffer overflows in the PDF Distiller in the BlackBerry Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server 4.1.3 through 5.0.2, and…
–
CVE-2010-2602
Multiple buffer overflows in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Enterprise Server 5.0.0 through 5.0.2, 4.1.6, and 4.1.7 allow remote…
–
CVE-2010-2601
Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and…