Research In Motion has acknowledged multiple vulnerabilities in BlackBerry Enterprise Server, which can be exploited by malicious people to disclose sensitive information, manipulate certain data, and cause a DoS (Denial of Service).

The vulnerabilities exist in the bundled Apache Tomcat server, which is used by the BlackBerry Administration service.

For more information:
SA26466
SA28046
SA28878
SA35326
SA37291
SA39574

The vulnerabilities are reported in version 4.1.4 and higher.

Solution
Apply the Interim Security Software Update (please see the vendor's advisory for details).
Original Advisory
http://www.blackberry.com/btsc/KB25966

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area