CVE-2017-3890

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-01-13 · updated 2026-06-17
Weakness: CWE-79

Description

A reflected cross-site scripting vulnerability in the BlackBerry WatchDox Server components Appliance-X, version 1.8.1 and earlier, and vAPP, versions 4.6.0 to 5.4.1, allows remote attackers to execute script commands in the context of the affected browser by persuading a user to click an attacker-supplied malicious link.

Affected products

BlackBerry Appliance-X: through 1.8.1
BlackBerry Workspaces Vapp: 4.6.0, 5.4.1

References

http://support.blackberry.com/kb/articleDetail?articleNumber=000038915
http://www.securityfocus.com/bid/95442
http://support.blackberry.com/kb/articleDetail?articleNumber=000038915
http://www.securityfocus.com/bid/95442

Get alerted when CVE-2017-3890 or the next vulnerability affects your stack