CVE-2026-18247 — DOM-Based Cross-Site Scripting in BlackBerry AtHoc Web Portals
A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the con…
Published: 2026-08-11 · CVSS: 5.3 · CVSS 4.0
A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7