BL
Vendor
Blackberry
109
CVEs
3
On KEV
0
New 30D
Products
WS9.8
Workspaces Server
Blackberry
3 CVEs2 on KEV0 new
GC9.8
Good Control
Blackberry
1 CVEs1 on KEV0 new
QS9.8
Qnx Software Development Platform
Blackberry
21 CVEs0 on KEV0 new
UE7.5
Unified Endpoint Manager
Blackberry
9 CVEs0 on KEV0 new
ES6.1
Enterprise Server
Blackberry
8 CVEs0 on KEV0 new
AT7.2
Athoc
Blackberry
7 CVEs0 on KEV0 new
BE8.8
Blackberry Enterprise Service
Blackberry
5 CVEs0 on KEV0 new
BO–
Blackberry OS
Blackberry
4 CVEs0 on KEV0 new
QN–
Qnx Neutrino Rtos
Blackberry
4 CVEs0 on KEV0 new
UE7.5
Unified Endpoint Management
Blackberry
4 CVEs0 on KEV0 new
BL–
Blackberry Link
Blackberry
3 CVEs0 on KEV0 new
ES8.2
Enterprise Service
Blackberry
3 CVEs0 on KEV0 new
PR7.8
Protect
Blackberry
3 CVEs0 on KEV0 new
WV9.8
Workspaces Vapp
Blackberry
3 CVEs0 on KEV0 new
ES–
Enterprise Server Express
Blackberry
2 CVEs0 on KEV0 new
QM7.8
Qnx Momentics
Blackberry
2 CVEs0 on KEV0 new
QO9.8
Qnx OS For Medical
Blackberry
2 CVEs0 on KEV0 new
QO9.8
Qnx OS For Safety
Blackberry
2 CVEs0 on KEV0 new
UE6.9
UEM
BlackBerry
2 CVEs0 on KEV0 new
WA9.8
Workspaces Appliance-x
Blackberry
2 CVEs0 on KEV0 new
Z1–
Z10
Blackberry
2 CVEs0 on KEV0 new
AP6.1
Appliance-x
Blackberry
1 CVEs0 on KEV0 new
BA5.3
BlackBerry AtHoc IWS
BlackBerry
1 CVEs0 on KEV0 new
BT–
Blackberry Tablet OS
Blackberry
1 CVEs0 on KEV0 new
BU–
Blackberry Universal Device Service
Blackberry
1 CVEs0 on KEV0 new
BW–
Blackberry World
Blackberry
1 CVEs0 on KEV0 new
BZ–
Blackberry Z10
Blackberry
1 CVEs0 on KEV0 new
EM4.7
Enterprise Mobility Server
Blackberry
1 CVEs0 on KEV0 new
GC7.5
Good Control Server
Blackberry
1 CVEs0 on KEV0 new
GE6.6
Good Enterprise Mobility Server
Blackberry
1 CVEs0 on KEV0 new
PF6.5
Playbook Firmware
Blackberry
1 CVEs0 on KEV0 new
Q1–
Q10
Blackberry
1 CVEs0 on KEV0 new
Q5–
Q5
Blackberry
1 CVEs0 on KEV0 new
QM–
Qnx Momentics Tool Suite
Blackberry
1 CVEs0 on KEV0 new
QN5.5
Qnx Neutrino Real-time Operating System
Blackberry
1 CVEs0 on KEV0 new
UN–
Unite
Blackberry
1 CVEs0 on KEV0 new
WO8.8
Workspaces
Blackberry
1 CVEs0 on KEV0 new
Z3–
Z30
Blackberry
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-18247 | BA BlackBerry AtHoc IWS BlackBerry | 5.3 | Aug 11 | DOM-Based Cross-Site Scripting in BlackBerry AtHoc Web Portals |
| CVE-2026-18084 | UE UEM BlackBerry | 6.1 | Jul 28 | Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM |
| CVE-2026-18085 | UE UEM BlackBerry | 6.9 | Jul 28 | Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM |
| CVE-2025-12766 | AT Athoc Blackberry | 5.0 | Nov 19 | An Insecure Direct Object Reference (IDOR) vulnerability in the Management Console of BlackBerry® AtHoc® (OnPrem) version 7.21 could allow an attacker to potentially gain… |
| CVE-2025-2474 | QS Qnx Software Development Platform Blackberry | 9.8 | Jun 10 | Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in… |
| CVE-2024-48858 | QS Qnx Software Development Platform Blackberry | 7.5 | Jan 14 | Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context… |
| CVE-2024-48857 | QS Qnx Software Development Platform Blackberry | 7.5 | Jan 14 | NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context… |
| CVE-2024-48856 | QS Qnx Software Development Platform Blackberry | 9.8 | Jan 14 | Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in… |
| CVE-2024-48855 | QS Qnx Software Development Platform Blackberry | 7.5 | Jan 14 | Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the… |
| CVE-2024-48854 | QS Qnx Software Development Platform Blackberry | 7.5 | Jan 14 | Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the… |
| CVE-2024-51723 | AT Athoc Blackberry | 4.6 | Nov 25 | A Stored Cross-Site Scripting (XSS) vulnerability in the Management Console of BlackBerry AtHoc version 7.15 could allow an attacker to potentially execute actions in the context… |
| CVE-2024-35215 | QS Qnx Software Development Platform Blackberry | 6.2 | Oct 8 | NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform (SDP) version(s) 7.1 and 7.0 could allow an attacker with… |
| CVE-2024-35213 | QS Qnx Software Development Platform Blackberry | 9.0 | Jun 11 | An improper input validation vulnerability in the SGI Image Codec of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause a denial-of-service… |
| CVE-2023-32701 | QS Qnx Software Development Platform Blackberry | 7.1 | Nov 14 | Improper Input Validation in the Networking Stack of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or a… |
| CVE-2023-21523 | AT Athoc Blackberry | 5.4 | Sep 12 | A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerry AtHoc version 7.15 could allow an attacker to execute script… |
| CVE-2023-21520 | AT Athoc Blackberry | 5.3 | Sep 12 | A PII Enumeration via Credential Recovery in the Self Service (Credential Recovery) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially associate a list of… |
| CVE-2023-21522 | AT Athoc Blackberry | 6.1 | Sep 12 | A Reflected Cross-site Scripting (XSS) vulnerability in the Management Console (Reports) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially control a script… |
| CVE-2023-21521 | AT Athoc Blackberry | 7.2 | Sep 12 | An SQL Injection vulnerability in the Management Console (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from… |
| CVE-2021-32025 | QM Qnx Momentics Blackberry | 7.8 | Mar 10 | An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.0 to 7.0, QNX Momentics all 6.3.x… |
| CVE-2021-32024 | QS Qnx Software Development Platform Blackberry | 9.8 | Dec 13 | A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the… |
| CVE-2021-32023 | PR Protect Blackberry | 7.8 | Nov 10 | An elevation of privilege vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute… |
| CVE-2021-32022 | PR Protect Blackberry | 5.5 | Nov 10 | A low privileged delete vulnerability using CEF RPC server of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute… |
| CVE-2021-32021 | PR Protect Blackberry | 7.8 | Nov 10 | A denial of service vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code… |
| CVE-2021-22156 | QS Qnx Software Development Platform Blackberry | 9.8 | Aug 17 | An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® QNX Software Development Platform (SDP) version(s) 6.5.0SP1… |
| CVE-2021-22154 | UE Unified Endpoint Management Blackberry | 5.3 | May 13 | An Information Disclosure vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an… |
| CVE-2021-22153 | UE Unified Endpoint Management Blackberry | 7.3 | May 13 | A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker… |
| CVE-2021-22152 | UE Unified Endpoint Management Blackberry | 5.5 | May 13 | A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and… |
| CVE-2021-22155 | WS Workspaces Server Blackberry | 8.8 | May 13 | An Authentication Bypass vulnerability in the SAML Authentication component of BlackBerry Workspaces Server (deployed with Appliance-X) version(s) 10.1, 9.1 and earlier could… |
| CVE-2020-6933 | UE Unified Endpoint Manager Blackberry | 5.5 | Oct 14 | An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker… |
| CVE-2020-6932 | QS Qnx Software Development Platform Blackberry | 9.8 | Aug 12 | An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow… |
| CVE-2020-11652 In wildKEV | WS Workspaces Server Blackberry | 6.5 | Apr 30 | SaltStack Salt Path Traversal Vulnerability |
| CVE-2020-1938 In wildKEV | GC Good Control Blackberry | 9.8 | Feb 24 | Apache Tomcat Improper Privilege Management Vulnerability |
| CVE-2012-5828 | PF Playbook Firmware Blackberry | 6.5 | Feb 10 | BlackBerry PlayBook before 2.1 has an Information Disclosure Vulnerability via a Web browser component error |
| CVE-2019-8998 | QS Qnx Software Development Platform Blackberry | 7.8 | Jul 12 | An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development… |
| CVE-2019-8999 | UE Unified Endpoint Management Blackberry | 7.5 | Apr 18 | An XML External Entity vulnerability in the UEM Core of BlackBerry UEM version(s) earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any… |
| CVE-2019-8997 | AT Athoc Blackberry | 5.9 | Mar 21 | An XML External Entity Injection (XXE) vulnerability in the Management System (console) of BlackBerry AtHoc versions earlier than 7.6 HF-567 could allow an attacker to potentially… |
| CVE-2018-8892 | UE Unified Endpoint Manager Blackberry | 6.5 | Dec 20 | A cross-site request forgery (CSRF) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM… |
| CVE-2018-8891 | UE Unified Endpoint Manager Blackberry | 4.8 | Dec 20 | Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script… |
| CVE-2018-8888 | UE Unified Endpoint Manager Blackberry | 4.8 | Dec 20 | A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that… |
| CVE-2018-8890 | UE Unified Endpoint Manager Blackberry | 7.5 | Oct 12 | An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform… |
| CVE-2018-8889 | EM Enterprise Mobility Server Blackberry | 4.7 | Sep 19 | A directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility Server (BEMS) 2.8.17.29 and earlier could allow an attacker to retrieve arbitrary… |
| CVE-2017-17442 | UE Unified Endpoint Manager Blackberry | 6.1 | Mar 13 | In BlackBerry UEM Management Console version 12.7.1 and earlier, a reflected cross-site scripting vulnerability that could allow an attacker to execute script commands in the… |
| CVE-2017-9371 | QS Qnx Software Development Platform Blackberry | 2.6 | Nov 14 | In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the QNX SDP could allow an… |
| CVE-2017-9369 | QS Qnx Software Development Platform Blackberry | 3.8 | Nov 14 | In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, an information disclosure vulnerability in the default configuration of the QNX SDP could… |
| CVE-2017-3893 | QS Qnx Software Development Platform Blackberry | 1.9 | Nov 14 | In BlackBerry QNX Software Development Platform (SDP) 6.6.0, the default configuration of the QNX SDP system did not in all circumstances prevent attackers from modifying the GOT… |
| CVE-2017-3892 | QS Qnx Software Development Platform Blackberry | 3.8 | Nov 14 | In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an information disclosure vulnerability in the default configuration of the QNX SDP could allow an attacker to gain… |
| CVE-2017-3891 | QS Qnx Software Development Platform Blackberry | 9.6 | Nov 14 | In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet enabled on networks… |
| CVE-2017-9368 | WV Workspaces Vapp Blackberry | 7.5 | Oct 16 | An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for server-side applications by crafting a… |
| CVE-2017-9367 | WA Workspaces Appliance-x Blackberry | 9.8 | Oct 16 | A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of… |
| CVE-2017-9370 | WO Workspaces Blackberry | 8.8 | Aug 9 | An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who has legitimate access to BlackBerry… |
| CVE-2017-3894 | ES Enterprise Service Blackberry | 6.1 | May 10 | A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows… |
| CVE-2016-1915 | BE Blackberry Enterprise Service Blackberry | 6.1 | Apr 13 | Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to inject arbitrary web script or… |
| CVE-2016-1914 | BE Blackberry Enterprise Service Blackberry | 8.8 | Apr 13 | Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers… |
| CVE-2016-3127 | GC Good Control Server Blackberry | 7.5 | Mar 3 | An information disclosure vulnerability in the logging implementation of BlackBerry Good Control Server versions earlier than 2.3.53.62 allows remote attackers to gain and use… |
| CVE-2017-3890 | AP Appliance-x Blackberry | 6.1 | Jan 13 | A reflected cross-site scripting vulnerability in the BlackBerry WatchDox Server components Appliance-X, version 1.8.1 and earlier, and vAPP, versions 4.6.0 to 5.4.1, allows… |
| CVE-2016-3130 | ES Enterprise Service Blackberry | 8.1 | Jan 13 | An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or… |
| CVE-2016-3128 | ES Enterprise Service Blackberry | 8.2 | Jan 13 | A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to… |
| CVE-2016-3129 | GE Good Enterprise Mobility Server Blackberry | 6.6 | Dec 16 | A remote shell execution vulnerability in the BlackBerry Good Enterprise Mobility Server (GEMS) implementation of the Apache Karaf command shell in GEMS versions 2.1.5.3 to… |
| CVE-2016-3126 | ES Enterprise Server Blackberry | 6.1 | Apr 22 | Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or… |
| CVE-2016-1918 | ES Enterprise Server Blackberry | 6.1 | Apr 22 | Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or… |