Security Advisory

CVE-2016-1915

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-04-13 14:00:00
Last updated 2024-08-05 23:10:40
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to inject arbitrary web script or HTML via the locale parameter to (1) mydevice/index.jsp or (2) mydevice/loggedOut.jsp.