cve.bz

CVE-2023-50940

9.8 criticalEPSS 0.5%

Critical (9.8) in ibm powersc. EPSS 0.5% chance of exploitation in the next 30 days.

IBM PowerSC 1.3, 2.0, and 2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 275130.

Severity

CVSS 3.1

9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWEs
CWE-697, CWE-942
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON