DeutschShown in its original language — a full translation is planned for a future version.
BlackBerry AtHoc Server: Mehrere Schwachstellen
view advisory published 2023-09-12
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in BlackBerry AtHoc Server ausnutzen, um Informationen offenzulegen, SQL-Injection-Angriffe durchzuführen und Cross-Site-Scripting-Angriffe zu starten.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-21523US | medium5.4 | — | ||
A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerry AtHoc version 7.15 could allow an atta… | ||||
| CVE-2023-21520US | medium5.3 | — | ||
A PII Enumeration via Credential Recovery in the Self Service (Credential Recovery) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially a… | ||||
| CVE-2023-21522US | medium6.1 | — | ||
A Reflected Cross-site Scripting (XSS) vulnerability in the Management Console (Reports) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially control a script t… | ||||
| CVE-2023-21521US | high7.2 | — | ||
An SQL Injection vulnerability in the Management Console (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from t… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan