Orta CVSS 6.9
CVE-2026-18085: Unified Endpoint Manager: güvenlik açığı
Açıklama (NVD)
An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.
Özet bilgiler
- Ürün
- Blackberry Unified Endpoint Manager
- CVSS v3.1
- 6.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:H - CVSS v4.0
- 5.9
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS
- %0,26 (yüzdelik 18)
- CWE
- CWE-74
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| blackberry-unified-endpoint-manager | 12.23.0 | 12.23.0 | — |
| blackberry-unified-endpoint-manager | 12.23.0 | 12.23.0 | — |
| blackberry-unified-endpoint-manager | 12.23.0 | 12.23.0 | — |
| blackberry-unified-endpoint-manager | 12.23.0 | 12.23.0 | — |
| blackberry-unified-endpoint-manager | 12.23.0 | 12.23.0 | — |
| blackberry-unified-endpoint-manager | 12.23.0 | 12.23.0 | — |
| blackberry-unified-endpoint-manager | 12.23.0 | 12.23.0 | — |
| blackberry-unified-endpoint-manager | 12.23.0 | 12.23.0 | — |
| blackberry-unified-endpoint-manager | 12.23.0 | 12.23.0 | — |
| blackberry-unified-endpoint-manager | 12.22.1 | 12.22.1 | — |
| blackberry-unified-endpoint-manager | 12.22.1 | 12.22.1 | — |
| blackberry-unified-endpoint-manager | 12.22.1 | 12.22.1 | — |
| blackberry-unified-endpoint-manager | 12.22.1 | 12.22.1 | — |
| blackberry-unified-endpoint-manager | 12.22.1 | 12.22.1 | — |
| blackberry-unified-endpoint-manager | 12.22.1 | 12.22.1 | — |
| blackberry-unified-endpoint-manager | 12.22.1 | 12.22.1 | — |
| blackberry-unified-endpoint-manager | 12.22.1 | 12.22.1 | — |