CVE-2017-3890

MEDIO 6.1CVE-2017-3890 · Published 13/01/2017 · updated 17/06/2026

In breve

CVE-2017-3890 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda appliance-x (blackberry), workspaces vapp (blackberry).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.95%, superiore al 61.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
appliance-x blackberry	`≤ 1.8.1`	No fix yet
workspaces vapp blackberry	`= 4.6.0= 5.4.1`	No fix yet

Description

A reflected cross-site scripting vulnerability in the BlackBerry WatchDox Server components Appliance-X, version 1.8.1 and earlier, and vAPP, versions 4.6.0 to 5.4.1, allows remote attackers to execute script commands in the context of the affected browser by persuading a user to click an attacker-supplied malicious link.

References

support.blackberry.com/kb/articleDetail · Vendor Advisory
securityfocus.com/bid/95442 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free