CVE-2021-22154

Published: May 13, 2021Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

An Information Disclosure vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially gain access to a victim's web history.

Affected (11)

Products: Blackberry: Unified Endpoint Management

Blackberry

1 product

Unified Endpoint Management

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Blackberry Unified Endpoint Management	Up to 12.12.0
Blackberry Unified Endpoint Management	Version 12.12.1a quick_fix_1
Blackberry Unified Endpoint Management	Version 12.12.1a quick_fix_2
Blackberry Unified Endpoint Management	Version 12.12.1a quick_fix_3
Blackberry Unified Endpoint Management	Version 12.12.1a quick_fix_4
Blackberry Unified Endpoint Management	Version 12.12.1a quick_fix_5
Blackberry Unified Endpoint Management	Version 12.12.1a quick_fix_6
Blackberry Unified Endpoint Management	Version 12.13.0
Blackberry Unified Endpoint Management	Version 12.13.0 mr1
Blackberry Unified Endpoint Management	Version 12.13.1 quick_fix_1
Blackberry Unified Endpoint Management	Version 12.13.1 quick_fix_2

References (2)

https://support.blackberry.com/kb/articleDetail?articleNumber=000078971

Source: secure@blackberry.com

Vendor Advisory

https://support.blackberry.com/kb/articleDetail?articleNumber=000078971

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.