Not rated
CVE-2016-5937 IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute…
Description
IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Kenexa LCMS Premier on Cloud | 10.2.0 | No fix stated |
| Kenexa LCMS Premier on Cloud | 10.1.0 | No fix stated |
| Kenexa LCMS Premier on Cloud | 10.0.0 | No fix stated |
| Kenexa LCMS Premier on Cloud | 9.5.0 | No fix stated |
| Kenexa LCMS Premier on Cloud | 9.4.0 | No fix stated |
| Kenexa LCMS Premier on Cloud | 9.3.0 | No fix stated |
| Kenexa LCMS Premier on Cloud 9.2 | 9.2 → 9.2.1 | No fix stated |
| Kenexa LCMS Premier on Cloud | 9.1 | No fix stated |
| Kenexa LCMS Premier on Cloud | 9.0 | No fix stated |
Other CVEs of Kenexa LCMS Premier on Cloud
The 11 CVEs of Kenexa LCMS Premier on Cloud →
CVE-2017-1142
IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by…
Not rated
CVE-2017-1143
IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by…
Not rated
CVE-2016-9992
IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection
Not rated
CVE-2016-9994
IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection
Not rated