XSS in Blackberry Athoc Iws
CVE-2026-18247
A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session.
Vulnerability class: XSS (Cross-Site Scripting)
Affected products
- Blackberry Athoc Iws — versions 0