CVE-2026-18247

DOM-Based Cross-Site Scripting in BlackBerry AtHoc Web Portals PUBLISHED

Description (CNA)

A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session.

Affected (CNA)

Vendor / product	Versions
BlackBerry / BlackBerry AtHoc IWS	affected 0 before 7.21 HF-734

CWE

CWE-79

References

https://support.blackberry.com/pkb/s/article/141248

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.