Unified Endpoint Manager
9 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Unified Endpoint Manager, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
Unified Endpoint Manager CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 2 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 9 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High1
- Medium8
Latest CVEs
The 9 most recently published vulnerabilities affecting Unified Endpoint Manager.
- CVE-2026-18084Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM6.1
- CVE-2026-18085Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM6.9
- CVE-2020-6933An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker to potentially cau...5.5
- CVE-2018-8888A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be exec...4.8
- CVE-2018-8891Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later...4.8
- CVE-2018-8892A cross-site request forgery (CSRF) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the c...6.5
- CVE-2018-8890An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in...7.5
- CVE-2017-17442In BlackBerry UEM Management Console version 12.7.1 and earlier, a reflected cross-site scripting vulnerability that could allow an attacker to execute script commands in the context of the affecte...6.1
- CVE-2017-3894A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all versions of BES12, allows attackers to execute actio...6.1
Product grouping is registry-driven, with AI assist and human review. How it works