CVE-2018-8889: Blackberry Enterprise Mobility Server

Medium severity, CVSS 4.7. EPSS: 0.5% chance of exploitation in the next 30 days.

A directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility Server (BEMS) 2.8.17.29 and earlier could allow an attacker to retrieve arbitrary files in the context of a BEMS administrator account.

Affected products

• Blackberry Enterprise Mobility Server: up to and including 2.8.17.29

Published 2018-09-19. Last modified 2026-06-17.