CVE-2016-1916: XSS
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a certain Export IT screen.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1916?
CVE-2016-1916 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2016-1916?
To fix CVE-2016-1916, update BlackBerry Enterprise Server to version 12.4.1 or later.
Who is affected by CVE-2016-1916?
CVE-2016-1916 affects BlackBerry Enterprise Server 12 versions before 12.4.1.
What type of vulnerability is CVE-2016-1916?
CVE-2016-1916 is a cross-site scripting (XSS) vulnerability that allows remote authenticated users to inject scripts.
Can exploiting CVE-2016-1916 lead to data breaches?
Yes, exploiting CVE-2016-1916 can potentially lead to unauthorized access to sensitive data due to improper rendering.