{"id":"CVE-2023-21523","state":"PUBLISHED","title":"CVE-2023-21523","description":"\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nA Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerry AtHoc version 7.15 could allow an attacker to execute script commands in the context of the affected user account.\n\n\n\n\n\n\n\n","publishedAt":"2023-09-12T19:44:02.601Z","updatedAt":"2024-09-25T20:01:23.714Z","severity":null,"assigner":"blackberry","products":["BlackBerry AtHoc"],"affected":[{"vendor":"BlackBerry","product":"AtHoc","defaultStatus":"unaffected","versions":[{"version":"7.15","status":"affected"}]}],"references":["https://http://support.blackberry.com/kb/articleDetail?articleNumber=000112406"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:36.141Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/21xxx/CVE-2023-21523.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-21523","state":"PUBLISHED","datePublished":"2023-09-12T19:44:02.601Z","dateUpdated":"2024-09-25T20:01:23.714Z","assignerShortName":"blackberry","assignerOrgId":"dbe78b00-5e7b-4fda-8748-329789ecfc5c","dateReserved":"2022-11-17T22:40:09.109Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nA Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerry AtHoc version 7.15 could allow an attacker to execute script commands in the context of the affected user account.\n\n\n\n\n\n\n\n"}],"affected":[{"vendor":"BlackBerry","product":"AtHoc","defaultStatus":"unaffected","versions":[{"version":"7.15","status":"affected"}]}],"references":[{"url":"https://http://support.blackberry.com/kb/articleDetail?articleNumber=000112406"}],"providerMetadata":{"shortName":"blackberry","orgId":"dbe78b00-5e7b-4fda-8748-329789ecfc5c","dateUpdated":"2023-09-12T19:44:02.601Z"},"datePublic":"2023-09-12T19:43:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://http://support.blackberry.com/kb/articleDetail?articleNumber=000112406","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T09:44:01.033Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-25T20:01:14.262121Z","id":"CVE-2023-21523","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-25T20:01:23.714Z"}}]}}}