Skip to content
Noroxi

BlackBerry records

93 published records for vendor BlackBerry. 2 of them have been exploited in the wild (listed in CISA KEV) and 3 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
2 · 2.2%
Weaponized
3 · 3.2%
Pre-auth RCE
9
With a fix record
3.2%
Median publish → KEV
645 days

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

93 records
  • CVE-2020-1938
    99Now

    When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat.

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    apache · geodeFeb 24, 2020

  • CVE-2020-11652
    82Now

    An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2.

    MediumCVSS 6.5KEVWeaponizedEPSS 86%

    saltstack · saltApr 30, 2020

  • CVE-2020-6932
    40Plan

    An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platf

    CriticalCVSS 9.8No exploitEPSS 3%

    blackberry · qnx software development platformAug 12, 2020

  • CVE-2014-2533
    40Plan

    /sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arbitrary program name

    HighCVSS 7.2WeaponizedEPSS 2%

    blackberry · qnx neutrino rtosMar 18, 2014

  • CVE-2021-32024
    40Plan

    A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentia

    CriticalCVSS 9.8No exploitEPSS 1%

    blackberry · qnx software development platformDec 13, 2021

  • CVE-2021-22156
    40Plan

    An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® QNX Software Develop

    CriticalCVSS 9.8No exploitEPSS 1%

    blackberry · qnx software development platformAug 17, 2021

  • CVE-2008-3246
    39Monitor

    Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bu

    CriticalCVSS 9.3No exploitEPSS 6%

    blackberry · enterprise serverJul 21, 2008

  • CVE-2008-3024
    39Monitor

    Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileges via a long .pal f

    CriticalCVSS 9.3Proof of conceptEPSS 5%

    blackberry · qnx momenticsJul 7, 2008

  • CVE-2014-2389
    39Monitor

    Stack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10 devices with software 10.1.0.2312, when develope

    CriticalCVSS 9.3No exploitEPSS 5%

    blackberry · blackberry osApr 12, 2014

  • CVE-2017-9367
    39Monitor

    A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary f

    CriticalCVSS 9.8No exploitEPSS 1%

    blackberry · workspaces vappOct 16, 2017

  • CVE-2025-2474
    39Monitor

    Vulnerability in PCX Image Codec Impacts QNX Software Development Platform

    CriticalCVSS 9.8No exploitEPSS 0%

    blackberry · qnx software development platformJun 10, 2025

  • CVE-2024-48856
    39Monitor

    Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform

    CriticalCVSS 9.8No exploitEPSS 0%

    blackberry · qnx software development platformJan 14, 2025

  • CVE-2025-3945
    39Monitor

    Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)

    CriticalCVSS 9.8No exploitEPSS 0%

    tridium · niagaraMay 22, 2025

  • CVE-2025-3944
    39Monitor

    Incorrect Permission Assignment for Critical Resource

    CriticalCVSS 9.8No exploitEPSS 0%

    tridium · niagaraMay 22, 2025

  • CVE-2025-3940
    39Monitor

    Improper Use of Validation Framework

    CriticalCVSS 9.8No exploitEPSS 0%

    tridium · niagaraMay 22, 2025

  • CVE-2025-3937
    39Monitor

    Use of Password Hash with Insufficient Computational Effort

    CriticalCVSS 9.8No exploitEPSS 0%

    tridium · niagaraMay 22, 2025

  • CVE-2025-3938
    39Monitor

    Missing Cryptographic Step

    CriticalCVSS 9.8No exploitEPSS 0%

    tridium · niagaraMay 22, 2025

  • CVE-2017-3891
    38Monitor

    In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX

    CriticalCVSS 9.6No exploitEPSS 1%

    blackberry · qnx software development platformNov 14, 2017

  • CVE-2016-1914
    36Monitor

    Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server 12 (BES12) Self-Ser

    HighCVSS 8.8Proof of conceptEPSS 4%

    blackberry · blackberry enterprise serviceApr 13, 2017

  • CVE-2024-35213
    36Monitor

    Vulnerability in SGI Image Codec Impacts BlackBerry QNX Software Development Platform (SDP)

    CriticalCVSS 9.0No exploitEPSS 0%

    blackberry · qnx software development platformJun 11, 2024

  • CVE-2021-22155
    35Monitor

    An Authentication Bypass vulnerability in the SAML Authentication component of BlackBerry Workspaces Server (deployed with Appliance-X) vers

    HighCVSS 8.8No exploitEPSS 0%

    blackberry · workspaces serverMay 12, 2021

  • CVE-2017-9370
    35Monitor

    An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who

    HighCVSS 8.8No exploitEPSS 0%

    blackberry · workspacesAug 9, 2017

  • CVE-2026-18084
    34Monitor

    Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM

    HighCVSS 8.6No exploitEPSS 0%

    blackberry · unified endpoint managerJul 28, 2026

  • CVE-2025-3943
    33Monitor

    Use of GET Request Method With sensitive Query Strings

    HighCVSS 7.5No exploitEPSS 11%

    tridium · niagaraMay 22, 2025

  • CVE-2013-2687
    33Monitor

    Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool

    HighCVSS 7.8No exploitEPSS 8%

    blackberry · qnx momentics tool suiteJul 12, 2013