NVD

Id
25618  
Name
CVE-2015-4112  
Description
The Management Console in BlackBerry Enterprise Server (BES) 12 before 12.2 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site, related to a "cross frame scripting" issue.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-11-19  
Modified Date
2016-12-07  
Seq
2015-4112  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
135549 25618 CVE-2015-4112 http://www.blackberry.com/btsc/KB37573  View
135550 25618 CVE-2015-4112 1034154  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10656 JVNDB-2015-005976 BlackBerry Enterprise Server の管理コンソールにおけるクリックジャッキング攻撃を実行される脆弱性 BlackBerry Enterprise Server (BES) の管理コンソールは、FRAME 要素の使用を適切に制限しないため、クリックジャッキング攻撃を実行される脆弱性が存在します。 CVE-2015-4112 81337 CVE-2015-4112 25618 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005976.html 2015-11-10 2015-11-20 View