IBM Kenexa Lms vulnerabilities
11 vulnerabilities
Known vulnerabilities in IBM Kenexa Lms, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2016-5940ibm corporationkenexa lms on cloud+1
EPSS score0.54%
IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.CVE-2016-5942ibm corporationkenexa lms on cloud+1EPSS score0.55%
IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.CVE-2016-5941ibm corporationkenexa lms on cloud+1EPSS score1.59%
IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences (/../) to view arbitrary files on the system.CVE-2016-5938ibm corporationkenexa lms on cloud+1EPSS score0.31%
IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system.CVE-2016-8931ibm corporationkenexa lms on cloud+1EPSS score1.86%
IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.CVE-2016-8928ibm corporationkenexa lms on cloud+1EPSS score0.97%
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.CVE-2016-8935ibm corporationkenexa lms on cloud+1EPSS score0.54%
IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999483.CVE-2016-8929ibm corporationkenexa lms on cloud+1EPSS score0.88%
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.CVE-2016-8930ibm corporationkenexa lms on cloud+1EPSS score0.97%
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.CVE-2016-8932ibm corporationkenexa lms on cloud+1EPSS score1.86%
IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.CVE-2016-8933ibm corporationkenexa lms on cloud+1EPSS score1.81%
IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences (/../) to view arbitrary files on the system.