VULNERABILITY INTELLIGENCE
CVE-2026-18247
EPSS probability0.44%
CISA KEVNot currently listed
Published2026-08-11
Last modified2026-10-23
Description
A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session.
Weakness classification
- secure@blackberry.com: CWE-79