CVE-2023-21521

Severity: high (CVSS 7.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-09-12 · updated 2026-06-17
Weakness: CWE-89

Description

An SQL Injection vulnerability in the Management Console  (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database, recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system.

Affected products

BlackBerry AtHoc: 7.15

References

https://support.blackberry.com/kb/articleDetail?articleNumber=000112406
https://support.blackberry.com/kb/articleDetail?articleNumber=000112406

Get alerted when CVE-2023-21521 or the next vulnerability affects your stack