CVE-2017-9367: Blackberry Workspaces Appliance-X

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request.

Affected products

• Blackberry Workspaces Appliance-X: up to and including 1.11.2
• Blackberry Workspaces Vapp: version 5.5.0 only; version 5.5.1 only; version 5.5.2 only; version 5.5.3 only; version 5.5.4 only; version 5.5.5 only; …

Published 2017-10-16. Last modified 2026-06-17.