Blackberry Enterprise Server Express vulnerabilities

2 CVEs affecting Blackberry Enterprise Server Express, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-1469, published 2014-08-18.

More from Blackberry.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-1467, published 2014-02-14. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise Server Express for Exchange through 5.0.4, Enterprise Server…
• CVE-2014-1469, published 2014-08-18. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext credentials during exception handling, which allows local users to obtain sensitive…