VULNERABILITY INTELLIGENCE
CVE-2023-21523
CVSS score5.4 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2023-09-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Description
A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerry AtHoc version 7.15 could allow an attacker to execute script commands in the context of the affected user account.
Weakness classification
- nvd@nist.gov: CWE-79
Primary references
- secure@blackberry.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory