Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:powersc:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Powersc (10e91df0-f870-5284-9365-bfa27ba2c9ac) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-50962 |
vulnerable | 2026-06-08 06:16:17.151111 |
IBM PowerSC information disclosure
MEDIUM (5.9)
IBM PowerSC 1.3, 2.0, and 2.1 MFA does not implement the "HTTP Strict Transport Security" (HSTS) web security policy mechanism. IBM X-Force ID: 276004.
Published: 2024-02-02T01:18:59.448Z
Updated: 2024-08-22T14:21:13.192Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50941 |
vulnerable | 2026-06-08 06:16:17.060140 |
IBM PowerSC session fixation
MEDIUM (6.3)
IBM PowerSC 1.3, 2.0, and 2.1 does not provide logout functionality, which could allow an authenticated user to gain access to an unauthorized user using session fixation. IBM X-Force ID: 275131.
Published: 2024-02-02T01:11:23.968Z
Updated: 2024-08-02T22:23:44.166Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50940 |
vulnerable | 2026-06-08 06:16:17.059712 |
IBM PowerSC cross-resource origin sharing
MEDIUM (5.3)
IBM PowerSC 1.3, 2.0, and 2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 275130.
Published: 2024-02-02T01:05:18.602Z
Updated: 2024-08-02T22:23:44.049Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50939 |
vulnerable | 2026-06-08 06:16:17.059234 |
IBM PowerSC information Disclosure
MEDIUM (5.9)
IBM PowerSC 1.3, 2.0, and 2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 275129.
Published: 2024-02-01T23:53:06.761Z
Updated: 2024-08-02T22:23:44.115Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50938 |
vulnerable | 2026-06-08 06:16:17.058309 |
IBM PowerSC clickjacking
MEDIUM (6.5)
IBM PowerSC 1.3, 2.0, and 2.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 275128.
Published: 2024-02-02T01:14:20.340Z
Updated: 2024-08-02T22:23:44.093Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50937 |
vulnerable | 2026-06-08 06:16:17.057917 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50936 |
vulnerable | 2026-06-08 06:16:17.056999 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50935 |
vulnerable | 2026-06-08 06:16:17.056493 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50934 |
vulnerable | 2026-06-08 06:16:17.055910 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50933 |
vulnerable | 2026-06-08 06:16:17.054905 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50328 |
vulnerable | 2026-06-08 06:16:15.953001 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50327 |
vulnerable | 2026-06-08 06:16:15.952476 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50326 |
vulnerable | 2026-06-08 06:16:15.951655 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.