Vendor
BlackBerry
85 known vulnerabilities in products by BlackBerry, 2 of them actively exploited (CISA KEV).
Key figures
85
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-1938 | Apache Tomcat Improper Privilege Management Vulnerability In CISA KEValso in 20 other products | 9.8 | |
| Critical | CVE-2020-11652 | SaltStack Salt Path Traversal Vulnerability In CISA KEValso in 5 other products | 6.5 | |
| Critical | CVE-2020-6932 | BlackBerry QNX Software Development Platform (SDP): Improper Neutralization of Escape, Meta, or Control Sequences | 10.0 | |
| High | CVE-2016-1914 | BlackBerry Enterprise Service (BES): SQL Injection | 8.8 | |
| Critical | CVE-2021-32024 | BlackBerry QNX Software Development Platform (SDP): Improper Validation of Specified Type of Input | 9.8 | |
| Medium | CVE-2016-1915 | BlackBerry Enterprise Service (BES): Cross-Site Scripting (XSS) | 6.1 | |
| Critical | CVE-2017-9367 | BlackBerry Workspaces Server: Path Traversal | 9.8 | |
| Critical | CVE-2021-22156 | BlackBerry QNX Software Development Platform (SDP): Integer Overflow or Wraparound | 9.0 | |
| Medium | CVE-2016-3129 | BlackBerry GEMS versions 2.1.5.3 to 2.2.22.25: security vulnerability | 6.6 | |
| High | CVE-2016-3130 | Blackberry Enterprise Service (BES): Information Disclosure | 8.1 | |
| High | CVE-2016-3128 | Blackberry Enterprise Service (BES): Spoofing | 8.2 | |
| Critical | CVE-2017-3891 | BlackBerry QNX Software Development Platform (QNX SDP): Improper Restriction of Communication Channel to Intended Endpoints | 9.6 | |
| Medium | CVE-2012-5828 | BlackBerry Playbook Firmware: Information Disclosure | 6.5 | |
| Medium | CVE-2019-8997 | BlackBerry AtHoc: XML External Entity (XXE) | 5.9 | |
| Critical | CVE-2025-2474 | Vulnerability in PCX Image Codec Impacts QNX Software Development Platform | 9.8 | |
| High | CVE-2019-8999 | BlackBerry UEM: XML External Entity (XXE) | 7.5 | |
| High | CVE-2017-9368 | BlackBerry Workspaces Server: Information Disclosure | 7.5 | |
| High | CVE-2016-3127 | BlackBerry Good Control Server: Information Disclosure | 7.5 | |
| Critical | CVE-2024-48856 | Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform | 9.8 | |
| High | CVE-2021-22155 | BlackBerry Workspaces Server: Authentication Bypass | 8.8 | |
| Not rated | CVE-2013-2687 | BlackBerry QNX Momentics Tool Suite: Stack-Based Buffer Overflow | — | |
| High | CVE-2018-8890 | BlackBerry UEM: Information Disclosure | 7.5 | |
| High | CVE-2017-9370 | Blackberry Workspaces: Information Disclosure | 8.8 | |
| Not rated | CVE-2008-3246 | Blackberry Enterprise Server: Code Execution | — | |
| Not rated | CVE-2013-2688 | BlackBerry QNX Software Development Platform (SDP): Buffer Overflow | — |