CVE-2017-3890

Summary

A reflected cross-site scripting vulnerability in the BlackBerry WatchDox Server components Appliance-X, version 1.8.1 and earlier, and vAPP, versions 4.6.0 to 5.4.1, allows remote attackers to execute script commands in the context of the affected browser by persuading a user to click an attacker-supplied malicious link.

Affected Software

VendorProductVersion RangeStatus
n/aBlackBerry WatchDox ServerBlackBerry WatchDox Serveraffected

Weaknesses

  • cross-site scripting

ADP Enrichment

CVE Program Container

Additional References

References