CVE-2011-0286: XSS
First published: Mon Apr 18 2011(Updated: )
Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, and BlackBerry Enterprise Server Express software 5.0.1 and 5.0.2, allows remote attackers to inject arbitrary web script or HTML via the displayErrorMessage parameter in a ManageDevices action.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Rim Blackberry Enterprise Server | =5.0.2 | |
| Rim Blackberry Enterprise Server Express | =5.0.1 | |
| Rim Blackberry Enterprise Server Express | =5.0.2 | |
| Rim Blackberry Enterprise Server | =5.0.0 | |
| Rim Blackberry Enterprise Server | =5.0.3 | |
| Rim Blackberry Enterprise Server | =5.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.blackberry.com/btsc/KB26296
- http://www.cybsec.com/vuln/CYBSEC_Advisory_2011_0401_Cross_Site_Scripting_XSS_in_Blackberry_WebDesktop.pdf
- http://securitytracker.com/id?1025356
- http://www.securityfocus.com/bid/47324
- http://secunia.com/advisories/44183
- http://www.vupen.com/english/advisories/2011/0971
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/author
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/event
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/rim
- canonical/rim blackberry enterprise server
- version/rim blackberry enterprise server/5.0.2
- canonical/rim blackberry enterprise server express
- version/rim blackberry enterprise server express/5.0.1
- version/rim blackberry enterprise server express/5.0.2
- version/rim blackberry enterprise server/5.0.0
- version/rim blackberry enterprise server/5.0.3
- version/rim blackberry enterprise server/5.0.1