Kenexa LCMS Premier on Cloud vulnerabilities | LiveThreat CVE Feed

Product

Kenexa LCMS Premier on Cloud

by IBM Corporation · last CVE Mar 27, 2017

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 0High 5Medium 6Low 0

Severity

All severities11 Critical0 High5 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Kenexa LCMS Premier on Cloud to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-5937	8.8	1%	Feb 1	IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user… Affected: 9.0; 9.1; 9.2; 9.2.1; 9.3.0; 9.4.0; +4 more
CVE-2016-5952	8.8	1%	Feb 1	IBM Kenexa LCMS Premier on Cloud is vulnerable to SQL injection Affected: 9.0; 9.1; 9.2; 9.2.1; 9.3.0; 9.4.0; +4 more
CVE-2016-9993	7.1	1%	Mar 1	IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection Affected: 9.0; 9.1; 9.2; 9.2.1; 9.3.0; 9.4.0; +4 more
CVE-2016-9994	7.1	1%	Mar 1	IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection Affected: 9.0; 9.1; 9.2; 9.2.1; 9.3.0; 9.4.0; +4 more
CVE-2016-9992	7.1	1%	Mar 1	IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection Affected: 9.0; 9.1; 9.2; 9.2.1; 9.3.0; 9.4.0; +4 more
CVE-2017-1142	6.5	1%	Mar 27	IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in… Affected: 9.0; 9.1; 9.2; 9.2.1; 9.3.0; 9.4.0; +5 more
CVE-2016-5950	6.5	1%	Feb 1	IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user Affected: 9.0; 9.1; 9.2; 9.2.1; 9.3.0; 9.4.0; +4 more
CVE-2016-5948	5.4	1%	Feb 1	IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting Affected: 9.0; 9.1; 9.2; 9.2.1; 9.3.0; 9.4.0; +4 more
CVE-2016-5951	5.4	1%	Feb 1	IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting Affected: 9.0; 9.1; 9.2; 9.2.1; 9.3.0; 9.4.0; +4 more
CVE-2017-1143	5.3	1%	Mar 27	IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport… Affected: 9.0; 9.1; 9.2; 9.2.1; 9.3.0; 9.4.0; +5 more
CVE-2016-5949	4.3	1%	Feb 1	IBM Kenexa LCMS Premier on Cloud could allow an authenticated user to obtain sensitive user data with a specially crafted HTTP request Affected: 9.0; 9.1; 9.2; 9.2.1; 9.3.0; 9.4.0; +4 more