CVE-2016-1914 in Enterprise Service

Resumen (Inglés)

Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to execute arbitrary SQL commands via the imageName parameter to (1) mydevice/client/image, (2) admin/client/image, (3) myapps/client/image, (4) ssam/client/image, or (5) all/client/image.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2016-01-15

Divulgación

2017-04-13

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
81086	BlackBerry Enterprise Service Management Console inyección SQL	89	Prueba de concepto	Arreglo oficial	CVE-2016-1914

Fuentes

• MITRE
• NVD
• CVE Details