Back to Database
Status published
Critical
CVE-2017-9367
A directory traversal vulnerability in the BlackBerry Workspaces Server could...
Vulnerability Description
A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-9367
Credits & Attribution
No credits recorded in the NVD database.
More from BlackBerry
View All →CVE-2025-2474
Vulnerability in PCX Image Codec Impacts QNX Software Development Platform
Critical
9.8
CVE-2025-12766
Insecure Direct Object Reference (IDOR) vulnerability in the Management Console of affected versions of BlackBerry AtHoc.
Medium
5
CVE-2024-51723
Vulnerability in Management Console Impacts BlackBerry AtHoc
Medium
4.6
CVE-2024-51722
Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
Medium
6.4
CVE-2024-51721
Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
High
7.3
Affected Vendor
BlackBerry
View all reports →Affected Software
Workspaces Server
Vulnerable Versions:
BlackBerry Workspaces Server components Appliance-X 1.11.0 to 1.11.2, vApp versions 5.6.0 to 5.6.6, and vApp versions 5.5.9 and earlier
Timeline
Official Publish:
October 16th, 2017
Last Modified:
September 16th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.