Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm kenexa lms 5.0 vulnerabilities and exploits

(subscribe to this query)
5.4
CVSSv3
CVE-2016-8935
IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure wi...
Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.0Ibm Kenexa Lms 4.1
3.3
CVSSv3
CVE-2016-5938
IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system.
Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 5.2Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.0Ibm Kenexa Lms 5.1Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.1
5.7
CVSSv3
CVE-2016-5941
IBM Kenexa LMS on Cloud could allow a remote malicious user to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences (/../) to view arbitrary files on the system.
Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 5.0Ibm Kenexa Lms 5.2Ibm Kenexa Lms 4.1Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.1
5.4
CVSSv3
CVE-2016-5942
IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.0Ibm Kenexa Lms 5.1Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.1Ibm Kenexa Lms 5.2
6.5
CVSSv3
CVE-2016-8933
IBM Kenexa LMS on Cloud could allow a remote malicious user to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences (/../) to view arbitrary files on the system.
Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 4.1Ibm Kenexa Lms 5.0Ibm Kenexa Lms 5.2Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.1
7.6
CVSSv3
CVE-2016-8928
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the malicious user to view, add, modify or delete information in the back-end database.
Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 5.0Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 5.2Ibm Kenexa Lms 4.1Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.1
5.4
CVSSv3
CVE-2016-8929
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the malicious user to view, add, modify or delete information in the back-end database.
Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.1Ibm Kenexa Lms 4.1Ibm Kenexa Lms 5.0Ibm Kenexa Lms 5.2
7.6
CVSSv3
CVE-2016-8930
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the malicious user to view, add, modify or delete information in the back-end database.
Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.0Ibm Kenexa Lms 5.1Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.1Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 5.2
8.8
CVSSv3
CVE-2016-8931
IBM Kenexa LMS on Cloud could allow a remote malicious user to upload arbitrary files, which could allow the malicious user to execute arbitrary code on the vulnerable server.
Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.0Ibm Kenexa Lms 4.2Ibm Kenexa Lms 5.1Ibm Kenexa Lms 4.1Ibm Kenexa Lms 5.2
8.8
CVSSv3
CVE-2016-8932
IBM Kenexa LMS on Cloud could allow a remote malicious user to upload arbitrary files, which could allow the malicious user to execute arbitrary code on the vulnerable server.
Ibm Kenexa Lms 4.1Ibm Kenexa Lms 4.2Ibm Kenexa Lms 4.2.2Ibm Kenexa Lms 4.2.3Ibm Kenexa Lms 4.2.4Ibm Kenexa Lms 5.1Ibm Kenexa Lms 5.0Ibm Kenexa Lms 5.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30043cameraCVE-2023-40404CVE-2024-2793client sideCVE-2024-4469CVE-2024-3565CVE-2024-29825
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook