Not rated
CVE-2016-5952 IBM Kenexa LCMS Premier on Cloud is vulnerable to SQL injection
Description
IBM Kenexa LCMS Premier on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Kenexa LCMS Premier on Cloud | 10.2.0 | No fix stated |
| Kenexa LCMS Premier on Cloud | 10.1.0 | No fix stated |
| Kenexa LCMS Premier on Cloud | 10.0.0 | No fix stated |
| Kenexa LCMS Premier on Cloud | 9.5.0 | No fix stated |
| Kenexa LCMS Premier on Cloud | 9.4.0 | No fix stated |
| Kenexa LCMS Premier on Cloud | 9.3.0 | No fix stated |
| Kenexa LCMS Premier on Cloud 9.2 | 9.2 → 9.2.1 | No fix stated |
| Kenexa LCMS Premier on Cloud | 9.1 | No fix stated |
| Kenexa LCMS Premier on Cloud | 9.0 | No fix stated |
Other CVEs of Kenexa LCMS Premier on Cloud
The 11 CVEs of Kenexa LCMS Premier on Cloud →
CVE-2017-1142
IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by…
Not rated
CVE-2017-1143
IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by…
Not rated
CVE-2016-9992
IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection
Not rated
CVE-2016-9994
IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection
Not rated