Vulnerability · Published Sep 12, 2023 · Assigned by blackberry
CVE-2023-21523
Medium 5.4
In plain English
A medium-severity security flaw in AtHoc from BlackBerry. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Severity (CVSS NVD)5.4Medium
Exploit odds (30 days)0.4%top 71.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerry AtHoc version 7.15 could allow an attacker to execute script commands in the context of the affected user account.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| BlackBerry | AtHoc | 7.15 |