CVE-2023-21523: Blackberry Athoc

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerry AtHoc version 7.15 could allow an attacker to execute script commands in the context of the affected user account.

Affected products

• Blackberry Athoc: version 7.15 only

Published 2023-09-12. Last modified 2026-06-17.