CVE-2011-0290 — The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote authenticated users to log into arbitrary user accounts associated with the same organization, and send messages, read messages, read contact lists, or cause a denial of service (login unavailability), via unspecified vectors

Back Back to CVE browser

MEDIUM

The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote authenticated users to log into arbitrary user accounts associated with the same organization, and send messages, read messages, read contact lists, or cause a denial of service (login unavailability), via unspecified vectors

Published Oct 21, 2011

6.5

MEDIUM

CVSS 2.0

EPSS 2.10%

Description

The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote authenticated users to log into arbitrary user accounts associated with the same organization, and send messages, read messages, read contact lists, or cause a denial of service (login unavailability), via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Metrics

2.10% 0.02104

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.02104

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	2.10% (0.02104)	81.05th	v5 (v2026.06.15)
Jun 15, 2026	2.10% (0.02104)	79.25th	v5 (v2026.06.15)
Mar 17, 2025	0.72% (0.00716)	70.70th	v4 (v2025.03.14)
Dec 12, 2024	1.31% (0.01309)	86.49th	v3 (v2023.03.01)
Jun 10, 2024	1.31% (0.01309)	85.92th	v3 (v2023.03.01)
May 3, 2024	1.27% (0.01271)	85.56th	v3 (v2023.03.01)
Mar 7, 2023	1.27% (0.01271)	83.53th	v3 (v2023.03.01)
Mar 6, 2023	1.23% (0.01232)	67.28th	v2 (v2022.01.01)
Dec 23, 2022	1.23% (0.01232)	66.86th	v2 (v2022.01.01)
Apr 1, 2022	1.23% (0.01232)	64.85th	v2 (v2022.01.01)
Feb 4, 2022	1.23% (0.01232)	41.02th	v2 (v2022.01.01)

Weaknesses (1)

CWE-264

References (6)

http://secunia.com/advisories/46370
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1026179
vdb-entryx_refsource_SECTRACK
http://www.blackberry.com/btsc/KB28524
x_refsource_CONFIRMExploitVendor Advisory
http://www.osvdb.org/76286
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/50064
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/70519
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/46370		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1026179		vdb-entryx_refsource_SECTRACK
http://www.blackberry.com/btsc/KB28524		x_refsource_CONFIRMExploitVendor Advisory
http://www.osvdb.org/76286		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/50064		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/70519		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 21, 2011

Updated Aug 6, 2024

Reserved Jan 6, 2011

Link CVE-2011-0290

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2011-0290

Red Hat

Severity n/a

Public date n/a

Links CVE-2011-0290