NVD

Id
85285  
Name
CVE-2016-1915  
Description
Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to inject arbitrary web script or HTML via the locale parameter to (1) mydevice/index.jsp or (2) mydevice/loggedOut.jsp.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-04-27  
Published
2017-04-13  
Modified Date
2017-04-19  
Seq
2016-1915  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
415892 85285 CVE-2016-9121 http://www.openwall.com/lists/oss-security/2016/11/03/1  View
415893 85285 CVE-2016-9121 https://github.com/square/go-jose/commit/c7581939a3656bb65e89d64da0a52364a33d2507  View
415894 85285 CVE-2016-9121 https://hackerone.com/reports/164590  View
415895 85285 CVE-2016-9121 http://www.openwall.com/lists/oss-security/2016/11/03/1  View
415896 85285 CVE-2016-9121 https://github.com/square/go-jose/commit/c7581939a3656bb65e89d64da0a52364a33d2507  View
415897 85285 CVE-2016-9121 https://hackerone.com/reports/164590  View

Related JVN