Back to Database
Status published
Medium
CVE-2018-8891
Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console...
Vulnerability Description
Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-8891
Credits & Attribution
No credits recorded in the NVD database.
More from BlackBerry
View All →CVE-2025-2474
Vulnerability in PCX Image Codec Impacts QNX Software Development Platform
Critical
9.8
CVE-2025-12766
Insecure Direct Object Reference (IDOR) vulnerability in the Management Console of affected versions of BlackBerry AtHoc.
Medium
5
CVE-2024-51723
Vulnerability in Management Console Impacts BlackBerry AtHoc
Medium
4.6
CVE-2024-51722
Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
Medium
6.4
CVE-2024-51721
Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
High
7.3
Affected Vendor
BlackBerry
View all reports →Affected Software
BlackBerry UEM
Vulnerable Versions:
12.9.0 and earlier
Timeline
Official Publish:
December 20th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.