CVE-2016-1914 in BlackBerry Enterprise Service
Summary
Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to execute arbitrary SQL commands via the imageName parameter to (1) mydevice/client/image, (2) admin/client/image, (3) myapps/client/image, (4) ssam/client/image, or (5) all/client/image.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/15/2016
Disclosure
04/13/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 81086 | BlackBerry Enterprise Service Management Console sql injection | 89 | Proof-of-Concept | Official fix | CVE-2016-1914 |