CVE-2023-21522 (published 2023-09-12T18:29:24.729Z)

A Reflected Cross-site Scripting (XSS) vulnerability in the Management Console (Reports) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially control a script that is executed in the victim's browser then they can execute script commands in the context of the affected user account. 
Affected products: Vendor: BlackBerry
Product: AtHoc
Versions: 7.15