Blackberry Workspaces Appliance-X vulnerabilities

2 CVEs affecting Blackberry Workspaces Appliance-X, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-9368, published 2017-10-16.

More from Blackberry.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-9367, published 2017-10-16. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on…
• CVE-2017-9368, published 2017-10-16. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for server-side applications by crafting a request for specific…