Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:kenexa_lcms_premier:10.1:*:*:*:*:*:*:*

part: a version: 10.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductKenexa Lcms Premier (66bab34a-9161-52e9-972f-30c3d647c93a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9993 vulnerable 2026-06-08 05:08:25.214181 Details available
IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference #: 1992067.
Published: 2017-03-01T21:00:00.000Z
Updated: 2024-08-06T03:07:31.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9992 vulnerable 2026-06-08 05:08:25.213105 Details available
IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference #: 1992067.
Published: 2017-03-01T21:00:00.000Z
Updated: 2024-08-06T03:07:31.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5951 vulnerable 2026-06-08 05:07:58.189979 Details available
IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T01:15:10.598Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5950 vulnerable 2026-06-08 05:07:58.189519 Details available
IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T01:15:10.599Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5949 vulnerable 2026-06-08 05:07:58.189004 Details available
IBM Kenexa LCMS Premier on Cloud could allow an authenticated user to obtain sensitive user data with a specially crafted HTTP request.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T01:15:10.710Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5948 vulnerable 2026-06-08 05:07:58.188440 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5937 vulnerable 2026-06-08 05:07:58.146063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.