| Max CVSS | 6.8 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-9993 | 6.5 |
IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Re
|
01-03-2017 - 23:51 | 01-03-2017 - 21:59 | |
| CVE-2016-9992 | 6.5 |
IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Re
|
01-03-2017 - 23:50 | 01-03-2017 - 21:59 | |
| CVE-2016-5948 | 3.5 |
IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a t
|
09-02-2017 - 21:36 | 01-02-2017 - 20:59 | |
| CVE-2016-5950 | 4.0 |
IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user.
|
09-02-2017 - 21:25 | 01-02-2017 - 20:59 | |
| CVE-2016-5937 | 6.8 |
IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
|
08-02-2017 - 19:03 | 01-02-2017 - 20:59 | |
| CVE-2016-5951 | 3.5 |
IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a t
|
08-02-2017 - 18:51 | 01-02-2017 - 20:59 |