Field Assessment
AI analysis pending.
CVE
CVE-2015-4112
Severity
MEDIUM
CVSS
4.3
EPSS
1.12%
Original Filing — NVD Description
The Management Console in BlackBerry Enterprise Server (BES) 12 before 12.2 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site, related to a "cross frame scripting" issue.