CVEvulnerability
CVE-2015-4112
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-11-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-254
Description
The Management Console in BlackBerry Enterprise Server (BES) 12 before 12.2 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site, related to a "cross frame scripting" issue.
Affected configurations
• blackberry enterprise server 12.0
• blackberry enterprise server 12.1
Related
Weakness · not in database (1)
References
- http://www.blackberry.com/btsc/KB37573 Vendor Advisory
- http://www.securitytracker.com/id/1034154 www.securitytracker.com
- http://www.blackberry.com/btsc/KB37573 Vendor Advisory
- http://www.securitytracker.com/id/1034154 www.securitytracker.com