| CVE-2023-50962 |
IBM PowerSC 1.3, 2.0, and 2.1 MFA does not implement the "HTTP Strict Transport Security" (HSTS) web security policy…
|
5.9
Moyenne
|
2 févr. 2024 |
| CVE-2023-50328 |
IBM PowerSC 1.3, 2.0, and 2.1 may allow a remote attacker to view session identifiers passed via URL query strings
|
3.7
Faible
|
2 févr. 2024 |
| CVE-2023-50938 |
IBM PowerSC 1.3, 2.0, and 2.1 could allow a remote attacker to hijack the clicking action of the victim
|
6.5
Moyenne
|
2 févr. 2024 |
| CVE-2023-50935 |
IBM PowerSC 1.3, 2.0, and 2.1 fails to properly restrict access to a URL or resource, which may allow a remote…
|
6.5
Moyenne
|
2 févr. 2024 |
| CVE-2023-50941 |
IBM PowerSC 1.3, 2.0, and 2.1 does not provide logout functionality, which could allow an authenticated user to gain…
|
6.3
Moyenne
|
2 févr. 2024 |
| CVE-2023-50934 |
IBM PowerSC 1.3, 2.0, and 2.1 uses single-factor authentication which can lead to unnecessary risk of compromise when…
|
5.3
Moyenne
|
2 févr. 2024 |
| CVE-2023-50940 |
IBM PowerSC 1.3, 2.0, and 2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out…
|
5.3
Moyenne
|
2 févr. 2024 |
| CVE-2023-50936 |
IBM PowerSC 1.3, 2.0, and 2.1 does not invalidate session after logout which could allow an authenticated user to…
|
6.3
Moyenne
|
2 févr. 2024 |
| CVE-2023-50327 |
IBM PowerSC 1.3, 2.0, and 2.1 uses insecure HTTP methods which could allow a remote attacker to perform unauthorized…
|
5.3
Moyenne
|
2 févr. 2024 |
| CVE-2023-50937 |
IBM PowerSC 1.3, 2.0, and 2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
|
5.9
Moyenne
|
2 févr. 2024 |
| CVE-2023-50933 |
IBM PowerSC 1.3, 2.0, and 2.1 is vulnerable to HTML injection
|
6.1
Moyenne
|
2 févr. 2024 |
| CVE-2023-50326 |
IBM PowerSC 1.3, 2.0, and 2.1 uses an inadequate account lockout setting that could allow a remote attacker to brute…
|
7.5
Élevée
|
2 févr. 2024 |
| CVE-2023-50939 |
IBM PowerSC 1.3, 2.0, and 2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
|
5.9
Moyenne
|
1 févr. 2024 |