Description
A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BlackBerry | BlackBerry AtHoc IWS | < 7.21 HF-734 | 7.21 HF-734 |