Kenexa LMS on Cloud vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

KL

Product

Kenexa LMS on Cloud

by IBM Corporation · last CVE Mar 31, 2017

21

CVEs

0

On KEV

8.8

Max CVSS

0

New 30D

Vulnerabilities21 In the news0 Timeline

Severity mix

Critical 0High 5Medium 15Low 1

Severity

All severities21 Critical0 High5 Medium15 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Kenexa LMS on Cloud to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-8933	6.5	2%	Feb 1	IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system Affected: 13.0; 13.1; 13.2; 13.2.2; 13.2.3; 13.2.4; +3 more
CVE-2016-6126	6.5	2%	Feb 1	IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system Affected: 13.0; 13.1; 13.2; 13.2.2; 13.2.3; 13.2.4; +3 more
CVE-2016-8913	6.5	2%	Feb 1	IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system Affected: 13.0; 13.1; 13.2; 13.2.2; 13.2.3; 13.2.4; +3 more
CVE-2016-5939	6.3	1%	Feb 1	IBM Kenexa LMS on Cloud is vulnerable to SQL injection Affected: 13.0; 13.1; 13.2; 13.2.2; 13.2.3; 13.2.4; +3 more
CVE-2016-5941	5.7	2%	Feb 1	IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system Affected: 13.0; 13.1; 13.2; 13.2.2; 13.2.3; 13.2.4; +3 more
CVE-2016-8935	5.4	1%	Mar 31	IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting Affected: 13.0; 13.1; 13.2; 13.2.2; 13.2.3; 13.2.4; +3 more
CVE-2016-8929	5.4	1%	Feb 1	IBM Kenexa LMS on Cloud is vulnerable to SQL injection Affected: 13.0; 13.1; 13.2; 13.2.2; 13.2.3; 13.2.4; +3 more
CVE-2016-5940	5.4	1%	Feb 1	IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting Affected: 13.0; 13.1; 13.2; 13.2.2; 13.2.3; 13.2.4; +3 more
CVE-2016-5942	5.4	1%	Feb 1	IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting Affected: 13.0; 13.1; 13.2; 13.2.2; 13.2.3; 13.2.4; +3 more
CVE-2016-8911	5.4	1%	Feb 1	IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to hijack the clicking action of the victim Affected: 13.0; 13.1; 13.2; 13.2.2; 13.2.3; 13.2.4; +3 more
CVE-2016-8920	5.4	1%	Feb 1	IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting Affected: 13.0; 13.1; 13.2; 13.2.2; 13.2.3; 13.2.4; +3 more
CVE-2016-6123	5.4	1%	Feb 1	IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting Affected: 13.0; 13.1; 13.2; 13.2.2; 13.2.3; 13.2.4; +3 more
CVE-2016-6125	5.4	1%	Feb 1	IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting Affected: 13.0; 13.1; 13.2; 13.2.2; 13.2.3; 13.2.4; +3 more
CVE-2016-6122	4.3	1%	Feb 1	IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 discloses answers to security questions in a response to authenticated users Affected: 13.0; 13.1; 13.2; 13.2.2; 13.2.3; 13.2.4; +3 more
CVE-2016-8912	4.3	1%	Feb 1	IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 stores potentially sensitive information in in log files that could be read by an authenticated user Affected: 13.0; 13.1; 13.2; 13.2.2; 13.2.3; 13.2.4; +3 more