{"id":"CVE-2011-0286","url":"https://www.cyber-defence.io/tools/cve/CVE-2011-0286","generatedAt":"2026-10-27T19:48:54.898Z","title":"Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, and BlackBerry Enterprise Server…","description":"Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, and BlackBerry Enterprise Server Express software 5.0.1 and 5.0.2, allows remote attackers to inject arbitrary web script or HTML via the displayErrorMessage parameter in a ManageDevices action.","published":"2011-04-18T18:55:01.000Z","lastModified":"2026-06-16T23:27:09.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":4.3,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N"},"cwe":["CWE-79"],"affected":["rim/blackberry enterprise server","rim/blackberry enterprise server express"],"epss":{"score":0.01931,"percentile":0.79878,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.93%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://secunia.com/advisories/44183","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1025356","source":"cve@mitre.org"},{"url":"http://www.blackberry.com/btsc/KB26296","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.cybsec.com/vuln/CYBSEC_Advisory_2011_0401_Cross_Site_Scripting_XSS_in_Blackberry_WebDesktop.pdf","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/47324","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0971","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/44183","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1025356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blackberry.com/btsc/KB26296","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cybsec.com/vuln/CYBSEC_Advisory_2011_0401_Cross_Site_Scripting_XSS_in_Blackberry_WebDesktop.pdf","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/47324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0971","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-0286","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}