CVE-2019-8997

CVE-2019-8997 describes an XML External Entity (XXE) vulnerability in the Management System (console) of BlackBerry AtHoc versions earlier than 7.6 HF-567. An attacker could craft XML in an existing field to read arbitrary local files on the application server or cause outbound requests on the ne...