CVE-2023-21523

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerry AtHoc version 7.15 could allow an attacker to execute script commands in the context of the affected user account.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Sep 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-215247.8Windows Local Security Authority (LSA) Elevation of Privilege VulnerabilityCVE-2023-215255.3Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-215267.4Windows Netlogon Information Disclosure VulnerabilityCVE-2023-215277.5Windows iSCSI Service Denial of Service VulnerabilityCVE-2023-215287.8Microsoft SQL Server Remote Code Execution VulnerabilityCVE-2023-215298.8Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2023-21536.1A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unCVE-2023-215317.0Azure Service Fabric Container Elevation of Privilege VulnerabilityCVE-2023-215327.0Windows GDI Elevation of Privilege VulnerabilityCVE-2023-215358.1Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityCVE-2023-215364.7Event Tracing for Windows Information Disclosure VulnerabilityCVE-2023-215377.8Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVE-2023-21523: Medium severity, CVSS 5.4 | Vulnix