NVD

Id
18237  
Name
CVE-2016-1916  
Description
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a certain Export IT screen.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-04-22  
Modified Date
2016-12-02  
Seq
2016-1916  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
100679 18237 CVE-2016-1916 http://www.blackberry.com/btsc/KB38117  View
100680 18237 CVE-2016-1916 1035568  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1608 JVNDB-2016-002381 BlackBerry Enterprise Server の Management Console におけるクロスサイトスクリプティングの脆弱性 BlackBerry Enterprise Server (BES) の Management Console には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-1916 88422 CVE-2016-1916 18237 3.5 5.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002381.html 2016-04-12 2016-05-02 View