CVE-2023-21521: Blackberry Athoc

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

An SQL Injection vulnerability in the Management Console  (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database, recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system.

Affected products

• Blackberry Athoc: version 7.15 only

Published 2023-09-12. Last modified 2026-06-17.