CVE Feed

    Dashboard / CVE / CVE-2015-4112

    CVE-2015-4112

    The Management Console in BlackBerry Enterprise Server (BES) 12 before 12.2 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site, related to a "cross frame scripting" issue.

    Published:Nov 19, 2015
    Last Modified:Apr 12, 2025
    EPS:Nov 19, 2015
    EPSS Score:0.00217
    CVSS Score:4.3

    Affected Products

    Vendor
    Blackberry
    Product
    Enterprise Server

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2016-1918 (CVSS 6.1) — Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 be…
    CVE-2016-1916 (CVSS 5.4) — Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 be…
    CVE-2016-3126 (CVSS 6.1) — Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 be…
    CVE-2016-1917 (CVSS 6.1) — Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 be…
    CVE-2014-1469 (CVSS 4.9) — BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext cred…
    CVE-2014-1467 (CVSS 5) — BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domi…
    CVE-2008-3246 (CVSS 9.3) — Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Un…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High