CVE-2021-22152

Published: May 13, 2021Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user connections.

Affected (11)

Products: Blackberry: Unified Endpoint Management

Blackberry

1 product

Unified Endpoint Management

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Blackberry Unified Endpoint Management	Up to 12.12.0
Blackberry Unified Endpoint Management	Version 12.12.1a quick_fix_1
Blackberry Unified Endpoint Management	Version 12.12.1a quick_fix_2
Blackberry Unified Endpoint Management	Version 12.12.1a quick_fix_3
Blackberry Unified Endpoint Management	Version 12.12.1a quick_fix_4
Blackberry Unified Endpoint Management	Version 12.12.1a quick_fix_5
Blackberry Unified Endpoint Management	Version 12.12.1a quick_fix_6
Blackberry Unified Endpoint Management	Version 12.13.0
Blackberry Unified Endpoint Management	Version 12.13.0 mr1
Blackberry Unified Endpoint Management	Version 12.13.1 quick_fix_1
Blackberry Unified Endpoint Management	Version 12.13.1 quick_fix_2

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://support.blackberry.com/kb/articleDetail?articleNumber=000078971

Source: secure@blackberry.com

Vendor Advisory

https://support.blackberry.com/kb/articleDetail?articleNumber=000078971

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.