Kenexa Lms (Ibm) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2017-03-31. Vendor: Ibm.
CVEs of Kenexa Lms
- CVE-2016-8935 - CVSS 5.4 (medium), 2017-03-31: IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed…
- CVE-2016-5942 - CVSS 5.4 (medium), 2017-02-01: IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering…
- CVE-2016-8930 - CVSS 7.6 (high), 2017-02-01: IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view,…
- CVE-2016-8933 - CVSS 6.5 (medium), 2017-02-01: IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing…
- CVE-2016-5941 - CVSS 5.7 (medium), 2017-02-01: IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing…
- CVE-2016-8929 - CVSS 5.4 (medium), 2017-02-01: IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view,…
- CVE-2016-8932 - CVSS 8.8 (high), 2017-02-01: IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable…
- CVE-2016-5940 - CVSS 5.4 (medium), 2017-02-01: IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering…
- CVE-2016-8928 - CVSS 7.6 (high), 2017-02-01: IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view,…
- CVE-2016-8931 - CVSS 8.8 (high), 2017-02-01: IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable…
- CVE-2016-5938 - CVSS 3.3 (low), 2017-02-01: IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system.
