CVE-2016-3130

8.1 highEPSS 2.1%

High (8.1) in blackberry enterprise service. EPSS 2.1% chance of exploitation in the next 30 days.

An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt.

Severity

CVSS 3.0

8.1 high

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWEs: CWE-200, CWE-255
Published: 2017-01-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

blackberry:enterprise_service

References

http://support.blackberry.com/kb/articleDetail?articleNumber=000038914
http://www.securityfocus.com/bid/95924
http://www.securitytracker.com/id/1037584
http://support.blackberry.com/kb/articleDetail?articleNumber=000038914
http://www.securityfocus.com/bid/95924

Check your stack JSON