CVE-2023-21520: Blackberry Athoc

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

A PII Enumeration via Credential Recovery in the Self Service (Credential Recovery) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially associate a list of contact details with an AtHoc IWS organization.

Affected products

• Blackberry Athoc: version 7.15 only

Published 2023-09-12. Last modified 2026-06-17.