Uem
Monthly
We need to produce a JSON object according to the detailed instructions. The CVE is CVE-2026-18084, BlackBerry UEM Management Console, XSS, CVSS 4.0 given, CVSS 3.1 not provided, we need to independently assess CVSS 3.1 and 4.0 vectors, prevalence, etc. First, extract from input: - product_name: "BlackBerry UEM" (precisely "UEM" or "BlackBerry UEM Management Console" but description says "BlackBerry UEM Management Console of BlackBerry UEM" so product is BlackBerry UEM, specific component Management Console). We need 1-3 words, so "BlackBerry UEM" is fine. - summary: must synthesize from multiple sources. Description: Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console allows Cross-Site Scripting (XSS). Affects UEM: 12.23.0 QF8 or earlier. CVSS 4.0: 8.6, vector AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N. CWE-79. Tags: XSS, Uem. Reported by blackberry. CPE: cpe:2.3:a:blackberry:uem:*:*:*:*:*:*:*:* References: https://support.blackberry.com/pkb/s/article/141208. No KEV, POC status unknown. So we need to write summary: start with specific impact and product. "Cross-site scripting in BlackBerry UEM Management Console (versions 12.23.0 QF8 and earlier) allows..." Actually, XSS impact: an attacker can inject malicious scripts into the web console that execute in users' browsers. Potential impact: stealing session cookies, performing actions as victim, etc. But the CVSS 4.0 VC:H/VI:H/VA:H suggests high impact to vulnerable system (confidentiality, integrity, availability), and SC:L/SI:L suggests low subsequent impact. So it's a stored or reflected XSS with high impact on management console itself. So summary: "Cross-site scripting in BlackBerry UEM Management Console (versions 12.23.0 QF8 and earlier) allows an unauthenticated attacker to inject malicious scripts via crafted input, potentially leading to unauthorized actions, data theft, or system compromise on the UEM server." Need to mention 'activel
Improper input validation in the BlackBerry UEM Management Console (versions 12.23.0 QF8 and earlier, and 12.22.1 QF7 and earlier) enables unauthenticated remote attackers to trigger arbitrary file download operations and a potential denial of service condition against the console when a Management Console user interacts with attacker-influenced content. The CVSS 4.0 vector reflects high availability impact on the vulnerable system (VA:H) with residual integrity and availability effects on subsequently managed systems (SI:L/SA:L), though the vendor rates confidentiality impact as none (VC:N) - a notable discrepancy given the 'Arbitrary File Download' language in the description that warrants vendor clarification. No public exploit code or active exploitation has been identified; EPSS places this at the 11th percentile (0.21%) and SSVC independently assesses exploitation as none with a non-automatable attack path.
We need to produce a JSON object according to the detailed instructions. The CVE is CVE-2026-18084, BlackBerry UEM Management Console, XSS, CVSS 4.0 given, CVSS 3.1 not provided, we need to independently assess CVSS 3.1 and 4.0 vectors, prevalence, etc. First, extract from input: - product_name: "BlackBerry UEM" (precisely "UEM" or "BlackBerry UEM Management Console" but description says "BlackBerry UEM Management Console of BlackBerry UEM" so product is BlackBerry UEM, specific component Management Console). We need 1-3 words, so "BlackBerry UEM" is fine. - summary: must synthesize from multiple sources. Description: Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console allows Cross-Site Scripting (XSS). Affects UEM: 12.23.0 QF8 or earlier. CVSS 4.0: 8.6, vector AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N. CWE-79. Tags: XSS, Uem. Reported by blackberry. CPE: cpe:2.3:a:blackberry:uem:*:*:*:*:*:*:*:* References: https://support.blackberry.com/pkb/s/article/141208. No KEV, POC status unknown. So we need to write summary: start with specific impact and product. "Cross-site scripting in BlackBerry UEM Management Console (versions 12.23.0 QF8 and earlier) allows..." Actually, XSS impact: an attacker can inject malicious scripts into the web console that execute in users' browsers. Potential impact: stealing session cookies, performing actions as victim, etc. But the CVSS 4.0 VC:H/VI:H/VA:H suggests high impact to vulnerable system (confidentiality, integrity, availability), and SC:L/SI:L suggests low subsequent impact. So it's a stored or reflected XSS with high impact on management console itself. So summary: "Cross-site scripting in BlackBerry UEM Management Console (versions 12.23.0 QF8 and earlier) allows an unauthenticated attacker to inject malicious scripts via crafted input, potentially leading to unauthorized actions, data theft, or system compromise on the UEM server." Need to mention 'activel
Improper input validation in the BlackBerry UEM Management Console (versions 12.23.0 QF8 and earlier, and 12.22.1 QF7 and earlier) enables unauthenticated remote attackers to trigger arbitrary file download operations and a potential denial of service condition against the console when a Management Console user interacts with attacker-influenced content. The CVSS 4.0 vector reflects high availability impact on the vulnerable system (VA:H) with residual integrity and availability effects on subsequently managed systems (SI:L/SA:L), though the vendor rates confidentiality impact as none (VC:N) - a notable discrepancy given the 'Arbitrary File Download' language in the description that warrants vendor clarification. No public exploit code or active exploitation has been identified; EPSS places this at the 11th percentile (0.21%) and SSVC independently assesses exploitation as none with a non-automatable attack path.