CVE-2011-0286

Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software before 5.0.2 MR5 and 5.0.3 before MR1, and BlackBerry Enterprise Server Express software 5.0.1 and 5.0.2, allows remote attackers to inject arbitrary web script or HTML via the displayErrorMessage parameter in a ManageDevices action.

• CWE-79

• http://secunia.com/advisories/44183Vendor Advisory
• http://securitytracker.com/id?1025356
• http://www.blackberry.com/btsc/KB26296Vendor Advisory
• http://www.cybsec.com/vuln/CYBSEC_Advisory_2011_0401_Cross_Site_Scripting_XSS_in_Blackberry_WebDesktop.pdfExploit
• http://www.securityfocus.com/bid/47324
• http://www.vupen.com/english/advisories/2011/0971Vendor Advisory
• http://secunia.com/advisories/44183Vendor Advisory
• http://securitytracker.com/id?1025356
• http://www.blackberry.com/btsc/KB26296Vendor Advisory
• http://www.cybsec.com/vuln/CYBSEC_Advisory_2011_0401_Cross_Site_Scripting_XSS_in_Blackberry_WebDesktop.pdfExploit
• http://www.securityfocus.com/bid/47324
• http://www.vupen.com/english/advisories/2011/0971Vendor Advisory

Published

Apr 18, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0280Multiple cross-site scripting (XSS) vulnerabilities in HP Po…
• CVE-2011-0281The unparse implementation in the Key Distribution Center (K…
• CVE-2011-0282The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb…
• CVE-2011-0283The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb…
• CVE-2011-0284Double free vulnerability in the prepare_error_as function i…
• CVE-2011-0285The process_chpw_request function in schpw.c in the password…
• CVE-2011-0287Unspecified vulnerability in the BlackBerry Administration A…
• CVE-2011-0290The BlackBerry Collaboration Service in Research In Motion (…
• CVE-2011-0291The BlackBerry PlayBook service on the Research In Motion (R…
• CVE-2011-0310Buffer overflow in IBM WebSphere MQ 7.0 before 7.0.1.4 allow…
• CVE-2011-0311The class file parser in IBM Java before 1.4.2 SR13 FP9, as …
• CVE-2011-0314Heap-based buffer overflow in IBM WebSphere MQ 6.0 before 6.…