CVE-2011-0286

BlackBerry Enterprise Server < 5.0.2 MR5 and 5.0.3 < MR1 - XSS via Web Desktop Manager

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, and BlackBerry Enterprise Server Express software 5.0.1 and 5.0.2, allows remote attackers to inject arbitrary web script or HTML via the displayErrorMessage parameter in a ManageDevices action.

References (6)

Core 6
Core References
Vendor Advisory x_refsource_confirm
http://www.blackberry.com/btsc/KB26296
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0971
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44183
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1025356
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/47324

Scores

EPSS 0.0193
EPSS Percentile 77.7%

Details

CWE
CWE-79
Status published
Products (6)
rim/blackberry_enterprise_server 5.0.0
rim/blackberry_enterprise_server 5.0.1
rim/blackberry_enterprise_server 5.0.2
rim/blackberry_enterprise_server 5.0.3
rim/blackberry_enterprise_server_express 5.0.1
rim/blackberry_enterprise_server_express 5.0.2
Published Apr 18, 2011
Tracked Since Feb 18, 2026