CVE-2023-50962

all versions

IBM PowerSC 1.3, 2.0, and 2.1 MFA does not implement the "HTTP Strict Transport Security" (HSTS) web security policy mechanism. I

5.9MEDIUM

CVE-2023-50941

all versions

IBM PowerSC 1.3, 2.0, and 2.1 does not provide logout functionality, which could allow an authenticated user to gain access to an

6.3MEDIUM

CVE-2023-50938

all versions

IBM PowerSC 1.3, 2.0, and 2.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to

6.5MEDIUM

CVE-2023-50935

all versions

IBM PowerSC 1.3, 2.0, and 2.1 fails to properly restrict access to a URL or resource, which may allow a remote attacker to obtain

6.5MEDIUM

CVE-2023-50934

all versions

IBM PowerSC 1.3, 2.0, and 2.1 uses single-factor authentication which can lead to unnecessary risk of compromise when compared wit

5.3MEDIUM

CVE-2023-50328

all versions

IBM PowerSC 1.3, 2.0, and 2.1 may allow a remote attacker to view session identifiers passed via URL query strings. IBM X-Force I

3.7LOW

CVE-2023-50940

all versions

IBM PowerSC 1.3, 2.0, and 2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged acti

5.3MEDIUM

CVE-2023-50937

all versions

IBM PowerSC 1.3, 2.0, and 2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly se

5.9MEDIUM

CVE-2023-50936

all versions

IBM PowerSC 1.3, 2.0, and 2.1 does not invalidate session after logout which could allow an authenticated user to impersonate anot

6.3MEDIUM

CVE-2023-50933

all versions

IBM PowerSC 1.3, 2.0, and 2.1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when view

6.1MEDIUM

CVE-2023-50327

all versions

IBM PowerSC 1.3, 2.0, and 2.1 uses insecure HTTP methods which could allow a remote attacker to perform unauthorized file request

5.3MEDIUM

CVE-2023-50326

all versions

IBM PowerSC 1.3, 2.0, and 2.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account

7.5HIGH

CVE-2023-50939

all versions

IBM PowerSC 1.3, 2.0, and 2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly se

5.9MEDIUM