CVE-2016-1915 - Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to inject arbitrary web script or HTML via the locale parameter to (1) mydevice/index.jsp or (2) mydevice/loggedOut.jsp

Back Back to CVE browser

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to inject arbitrary web script or HTML via the locale parameter to (1) mydevice/index.jsp or (2) mydevice/loggedOut.jsp

Published Apr 13, 2017

6.1

MEDIUM

CVSS 3.0

EPSS 3.95%

Description

Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to inject arbitrary web script or HTML via the locale parameter to (1) mydevice/index.jsp or (2) mydevice/loggedOut.jsp.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

http://seclists.org/fulldisclosure/2016/Feb/95
mailing-listx_refsource_FULLDISCMailing ListThird Party AdvisoryVDB Entry
http://security-assessment.com/files/documents/advisory/Blackberry%20BES12%20Self-Service%20Multiple%20Vulnerabilities.pdf
x_refsource_MISCExploitThird Party Advisory
http://support.blackberry.com/kb/articleDetail?articleNumber=000038033
x_refsource_CONFIRMPatchVendor Advisory
http://www.securitytracker.com/id/1035095
vdb-entryx_refsource_SECTRACK
https://www.exploit-db.com/exploits/39481/
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://seclists.org/fulldisclosure/2016/Feb/95		mailing-listx_refsource_FULLDISCMailing ListThird Party AdvisoryVDB Entry
http://security-assessment.com/files/documents/advisory/Blackberry%20BES12%20Self-Service%20Multiple%20Vulnerabilities.pdf		x_refsource_MISCExploitThird Party Advisory
http://support.blackberry.com/kb/articleDetail?articleNumber=000038033		x_refsource_CONFIRMPatchVendor Advisory
http://www.securitytracker.com/id/1035095		vdb-entryx_refsource_SECTRACK
https://www.exploit-db.com/exploits/39481/		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 13, 2017

Updated Aug 5, 2024

Reserved Jan 15, 2016

Link CVE-2016-1915

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2016-1915

Red Hat

Severity n/a

Public date n/a

Links CVE-2016-1915