CVEvulnerability
CVE-2011-0286
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-04-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, and BlackBerry Enterprise Server Express software 5.0.1 and 5.0.2, allows remote attackers to inject arbitrary web script or HTML via the displayErrorMessage parameter in a ManageDevices action.
Affected configurations
• rim blackberry enterprise server 5.0.0
• rim blackberry enterprise server 5.0.1
• rim blackberry enterprise server 5.0.2
• rim blackberry enterprise server 5.0.3
• rim blackberry enterprise server express 5.0.1
• rim blackberry enterprise server express 5.0.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/44183 Vendor Advisory
- http://securitytracker.com/id?1025356 securitytracker.com
- http://www.blackberry.com/btsc/KB26296 Vendor Advisory
- http://www.cybsec.com/vuln/CYBSEC_Advisory_2011_0401_Cross_Site_Scripting_XSS_in_Blackberry_WebDesktop.pdf Exploit
- http://www.securityfocus.com/bid/47324 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0971 Vendor Advisory
- http://secunia.com/advisories/44183 Vendor Advisory
- http://securitytracker.com/id?1025356 securitytracker.com
- http://www.blackberry.com/btsc/KB26296 Vendor Advisory
- http://www.cybsec.com/vuln/CYBSEC_Advisory_2011_0401_Cross_Site_Scripting_XSS_in_Blackberry_WebDesktop.pdf Exploit
- http://www.securityfocus.com/bid/47324 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0971 Vendor Advisory