← Vulnerability feed

Vulnerability record · CVE-2011-0286 · published 18 April 2011

CVE-2011-0286: Rim blackberry enterprise server cross-site scripting vulnerability

Rim · Blackberry Enterprise Server

Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, and BlackBerry Enterprise Server Express software 5.0.1 and 5.0.2, allows remote attackers to inject arbitrary web script or HTML via the displayErrorMessage parameter in a ManageDevices action.

4.3 CVSS 2.0 Medium EPSS 1.9% · top 20.6% CWE-79 · Cross-site scripting
4.3CVSS 2.0 base score
1.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
12References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, and BlackBerry Enterprise Server Express software 5.0.1 and 5.0.2, allows remote attackers to inject arbitrary web script or HTML via the displayErrorMessage parameter in a ManageDevices action.

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/44183 Vendor Advisory
http://securitytracker.com/id?1025356
http://www.blackberry.com/btsc/KB26296 Vendor Advisory
http://www.cybsec.com/vuln/CYBSEC_Advisory_2011_0401_Cross_Site_Scripting_XSS_in_Blackberry_WebDesktop.pdf Exploit
http://www.securityfocus.com/bid/47324
http://www.vupen.com/english/advisories/2011/0971 Vendor Advisory
http://secunia.com/advisories/44183 Vendor Advisory
http://securitytracker.com/id?1025356
http://www.blackberry.com/btsc/KB26296 Vendor Advisory
http://www.cybsec.com/vuln/CYBSEC_Advisory_2011_0401_Cross_Site_Scripting_XSS_in_Blackberry_WebDesktop.pdf Exploit
http://www.securityfocus.com/bid/47324
http://www.vupen.com/english/advisories/2011/0971 Vendor Advisory

Track CVE-2011-0286 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2007-3483Rim blackberry enterprise server vulnerabilityResearch in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation of arbitrary third-party applic…EPSS 1.4%9.3CVE-2010-2604Rim blackberry enterprise server memory buffer overflow vulnerabilityMultiple buffer overflows in the PDF Distiller in the BlackBerry Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Serve…EPSS 5.7%9.3CVE-2009-4778Rim blackberry enterprise server vulnerabilityMultiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Serve…EPSS 4.3%9.3CVE-2009-2646Rim blackberry enterprise server vulnerabilityMultiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Serve…EPSS 3.6%9.3CVE-2009-2643Rim blackberry enterprise server vulnerabilityMultiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Serve…EPSS 5.0%9.3CVE-2008-3246Blackberry enterprise server code injection vulnerabilityUnspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 a…EPSS 6.9%7.8CVE-2005-2342Rim blackberry enterprise server vulnerabilityResearch in Motion (RIM) BlackBerry Router allows remote attackers to cause a denial of service (communication disruption) via crafted Server Routing…EPSS 3.9%7.6CVE-2010-2601Rim blackberry enterprise server memory buffer overflow vulnerabilityMultiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) sof…EPSS 3.3%

Source: NIST National Vulnerability Database (record CVE-2011-0286), CISA KEV, FIRST EPSS (scores of 2026-10-07). This page is refreshed as NVD updates the record.