CVE-2013-3693: Blackberry Enterprise Service

High severity, CVSS 7.9. EPSS: 1% chance of exploitation in the next 30 days.

The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly restrict access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to upload and execute arbitrary packages via a request to port 1098.

Affected products

• Blackberry Blackberry Enterprise Service: version 10.0 only; version 10.1.0 only; version 10.1.2 only

Published 2013-10-11. Last modified 2026-06-16.