NVD

Id
7407  
Name
CVE-2011-0286  
Description
Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, and BlackBerry Enterprise Server Express software 5.0.1 and 5.0.2, allows remote attackers to inject arbitrary web script or HTML via the displayErrorMessage parameter in a ManageDevices action.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-04-18  
Modified Date
2011-04-18  
Seq
2011-0286  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
41746 7407 CVE-2011-0286 1025356  View
41747 7407 CVE-2011-0286 http://www.blackberry.com/btsc/KB26296  View
41748 7407 CVE-2011-0286 http://www.cybsec.com/vuln/CYBSEC_Advisory_2011_0401_Cross_Site_Scripting_XSS_in_Blackberry_WebDesktop.pdf  View
41749 7407 CVE-2011-0286 47324  View
41750 7407 CVE-2011-0286 ADV-2011-0971  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33838 JVNDB-2011-004080 RIM BlackBerry Enterprise Server の webdesktop/app におけるクロスサイトスクリプティングの脆弱性 Research In Motion (RIM) の BlackBerry Enterprise Server (BES) および BlackBerry Enterprise Server Express の BlackBerry Web Desktop Manager コンポーネントには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-0286 48193 CVE-2011-0286 7407 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004080.html 2011-04-18 2012-03-27 View