CVE-2016-1915: XSS

Q: What is the severity of CVE-2016-1915?

CVE-2016-1915 has a medium severity level, allowing remote attackers to exploit multiple cross-site scripting (XSS) vulnerabilities.

Q: How do I fix CVE-2016-1915?

To address CVE-2016-1915, update BlackBerry Enterprise Server to version 12.4 or later.

Q: What platforms are affected by CVE-2016-1915?

CVE-2016-1915 affects BlackBerry Enterprise Server 12 (BES12) Self-Service versions prior to 12.4.

Q: What impact does CVE-2016-1915 have on users?

CVE-2016-1915 allows attackers to inject arbitrary web scripts or HTML, potentially compromising user data and session security.

Q: Is authentication required to exploit CVE-2016-1915?

No, CVE-2016-1915 can be exploited remotely without authentication, making it a significant security risk.

Published Apr 13, 2017

Updated

Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to inject arbitrary web script or HTML via the locale parameter to (1) mydevice/index.jsp or (2) mydevice/loggedOut.jsp.

Affected Software

1 affected component

BlackBerry BlackBerry Enterprise Service<=12.3.1

Remediation

Patch Available

http://support.blackberry.com/kb/articleDetail?articleNumber=000038033

Event History

Apr 13, 2017

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-1915?

CVE-2016-1915 has a medium severity level, allowing remote attackers to exploit multiple cross-site scripting (XSS) vulnerabilities.

How do I fix CVE-2016-1915?