UE
Product
Unified Endpoint Manager
9
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 8Low 0
Watch
Add Unified Endpoint Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-8890 | 7.5 | Oct 12 | An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform… Affected: 12.8.0; 12.8.1 |
| CVE-2026-18085 | 6.9 | Jul 28 | Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM Affected: 12.23.0; 12.23.0; 12.23.0; 12.23.0; 12.23.0; 12.23.0; +11 more |
| CVE-2018-8892 | 6.5 | Dec 20 | A cross-site request forgery (CSRF) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM… Affected: before 12.9.1 |
| CVE-2026-18084 | 6.1 | Jul 28 | Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM Affected: 12.23.0; 12.23.0; 12.23.0; 12.23.0; 12.23.0; 12.23.0; +11 more |
| CVE-2017-17442 | 6.1 | Mar 13 | In BlackBerry UEM Management Console version 12.7.1 and earlier, a reflected cross-site scripting vulnerability that could allow an attacker to execute script commands in the… Affected: through 12.7.1 |
| CVE-2017-3894 | 6.1 | May 10 | A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows… Affected: through 12.6.1 |
| CVE-2020-6933 | 5.5 | Oct 14 | An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker… Affected: through 12.11.1; 12.11.1; 12.11.1; 12.11.1; 12.12.1a; 12.12.1a; +2 more |
| CVE-2018-8891 | 4.8 | Dec 20 | Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script… Affected: before 12.9.1 |
| CVE-2018-8888 | 4.8 | Dec 20 | A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that… Affected: before 12.10.0 |
Showing 9