Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm kenexa lms on cloud 5.2 vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv2
CVE-2016-5939
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the malicious user to view, add, modify or delete information in the back-end database.
Ibm Kenexa Lms On Cloud 4.2Ibm Kenexa Lms On Cloud 4.2.2Ibm Kenexa Lms On Cloud 4.2.3Ibm Kenexa Lms On Cloud 4.2.4Ibm Kenexa Lms On Cloud 5.0Ibm Kenexa Lms On Cloud 4.1Ibm Kenexa Lms On Cloud 5.2Ibm Kenexa Lms On Cloud 5.1
2.1
CVSSv2
CVE-2016-5938
IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system.
Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 5.2Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.0Ibm Kenexa Lms 5.1Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.1
6.5
CVSSv2
CVE-2016-8931
IBM Kenexa LMS on Cloud could allow a remote malicious user to upload arbitrary files, which could allow the malicious user to execute arbitrary code on the vulnerable server.
Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.0Ibm Kenexa Lms 4.2Ibm Kenexa Lms 5.1Ibm Kenexa Lms 4.1Ibm Kenexa Lms 5.2
6.5
CVSSv2
CVE-2016-8932
IBM Kenexa LMS on Cloud could allow a remote malicious user to upload arbitrary files, which could allow the malicious user to execute arbitrary code on the vulnerable server.
Ibm Kenexa Lms 4.1Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.1Ibm Kenexa Lms 5.0Ibm Kenexa Lms 5.2
3.5
CVSSv2
CVE-2016-5941
IBM Kenexa LMS on Cloud could allow a remote malicious user to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences (/../) to view arbitrary files on the system.
Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 5.0Ibm Kenexa Lms 5.2Ibm Kenexa Lms 4.1Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.1
4
CVSSv2
CVE-2016-8933
IBM Kenexa LMS on Cloud could allow a remote malicious user to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences (/../) to view arbitrary files on the system.
Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 4.1Ibm Kenexa Lms 5.0Ibm Kenexa Lms 5.2Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.1
5.5
CVSSv2
CVE-2016-8929
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the malicious user to view, add, modify or delete information in the back-end database.
Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.1Ibm Kenexa Lms 4.1Ibm Kenexa Lms 5.0Ibm Kenexa Lms 5.2
6.5
CVSSv2
CVE-2016-8928
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the malicious user to view, add, modify or delete information in the back-end database.
Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 5.0Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 5.2Ibm Kenexa Lms 4.1Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.1
6.5
CVSSv2
CVE-2016-8930
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the malicious user to view, add, modify or delete information in the back-end database.
Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.0Ibm Kenexa Lms 5.1Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.1Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 5.2
3.5
CVSSv2
CVE-2016-5940
IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Ibm Kenexa Lms 5.1Ibm Kenexa Lms 5.2Ibm Kenexa Lms 4.1Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 5.0Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 4.2.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereferenceCVE-2023-52689CVE-2024-23803client sideCVE-2023-52696information disclosureCVE-2024-35843CVE-2024-27130CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook