Medium severity · published Oct 14, 2020
CVE-2020-6933
An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker…
5.5
CVSS
0.3%
EPSS
No
On KEV
Description
An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker to potentially cause a Denial of Service (DoS) of the UEM Core service.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 20% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UE
Unified Endpoint Manager · Blackberry
through 12.11.1; 12.11.1; 12.11.1; 12.11.1; 12.12.1a; 12.12.1a; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-6933
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-6933
Patch
https://support.blackberry.com/kb/articleDetail?articleNumber=000068112
More from Unified Endpoint Manager
7.5
CVE-2018-8890
An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform…
6.9
CVE-2026-18085
Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM
6.5
CVE-2018-8892
A cross-site request forgery (CSRF) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM…
6.1
CVE-2026-18084
Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM
6.1
CVE-2017-17442
In BlackBerry UEM Management Console version 12.7.1 and earlier, a reflected cross-site scripting vulnerability that could allow an attacker to execute script commands in the…