CVE-2021-22154: Blackberry Unified Endpoint Management

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

An Information Disclosure vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially gain access to a victim's web history.

Affected products

• Blackberry Unified Endpoint Management: up to and including 12.12.0; version 12.12.1a only; version 12.13.0 only; version 12.13.1 only

Published 2021-05-13. Last modified 2026-06-17.