CVE-2017-3890

A reflected cross-site scripting vulnerability in the BlackBerry WatchDox Server components Appliance-X, version 1.8.1 and earlier, and vAPP, versions 4.6.0 to 5.4.1, allows remote attackers to execute script commands in the context of the affected browser by persuading a user to click an attacker-supplied malicious link.

Score

CVSS 3.1 6.1 Medium

Status

Modified - secure@blackberry.com

Published

2017-01-13

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Appliance-x (Blackberry)
• Workspaces Vapp (Blackberry)

References

• http://support.blackberry.com/kb/articleDetail?articleNumber=000038915
• http://www.securityfocus.com/bid/95442