Skip to content

Known vulnerabilities in IBM Corporation Kenexa LMS on Cloud

Is your version affected?

CVE Summary Score Published
CVE-2016-8935 IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting Not rated Mar 31, 2017
CVE-2016-8931 IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to… Not rated Feb 1, 2017
CVE-2016-8930 IBM Kenexa LMS on Cloud is vulnerable to SQL injection Not rated Feb 1, 2017
CVE-2016-8929 IBM Kenexa LMS on Cloud is vulnerable to SQL injection Not rated Feb 1, 2017
CVE-2016-8928 IBM Kenexa LMS on Cloud is vulnerable to SQL injection Not rated Feb 1, 2017
CVE-2016-8933 IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system Not rated Feb 1, 2017
CVE-2016-8932 IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to… Not rated Feb 1, 2017
CVE-2016-5942 IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting Not rated Feb 1, 2017
CVE-2016-5941 IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system Not rated Feb 1, 2017
CVE-2016-5940 IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting Not rated Feb 1, 2017
CVE-2016-5938 IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system Not rated Feb 1, 2017
CVE-2016-8920 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting Not rated Feb 1, 2017
CVE-2016-8913 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system Not rated Feb 1, 2017
CVE-2016-8912 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 stores potentially sensitive information in in log files that could be… Not rated Feb 1, 2017
CVE-2016-8911 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to hijack the clicking action of the victim Not rated Feb 1, 2017
CVE-2016-6123 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting Not rated Feb 1, 2017
CVE-2016-6122 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 discloses answers to security questions in a response to authenticated… Not rated Feb 1, 2017
CVE-2016-6126 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system Not rated Feb 1, 2017
CVE-2016-6125 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting Not rated Feb 1, 2017
CVE-2016-6124 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to upload arbitrary files, which could… Not rated Feb 1, 2017
CVE-2016-5939 IBM Kenexa LMS on Cloud is vulnerable to SQL injection Not rated Feb 1, 2017

Other IBM Corporation products