CVE-2023-21521

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

An SQL Injection vulnerability in the Management Console  (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database, recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Sep 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-215226.1A Reflected Cross-site Scripting (XSS) vulnerability in the Management Console (Reports) of BlackBerry AtHoc version 7.15 could allow an attCVE-2023-215235.4A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerry AtHoc version 7.15 coCVE-2023-215247.8Windows Local Security Authority (LSA) Elevation of Privilege VulnerabilityCVE-2023-215255.3Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-215267.4Windows Netlogon Information Disclosure VulnerabilityCVE-2023-215277.5Windows iSCSI Service Denial of Service VulnerabilityCVE-2023-215287.8Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2023-215298.8Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2023-21536.1A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unCVE-2023-215317.0Azure Service Fabric Container Elevation of Privilege VulnerabilityCVE-2023-215327.0Windows GDI Elevation of Privilege VulnerabilityCVE-2023-215358.1Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2023-21521: High severity, CVSS 7.2 | Vulnix