CVE-2018-8888

—

CVSS 3.0

4.8 medium

EPSS

<1%p42

Published

Dec 20, 2018 (Dec 20, 2018)

Modified

Jun 17, 2026

Description

A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.

Vendors: blackberry
Products: unified endpoint manager
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.