Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:kenexa_lcms_premier:9.1:*:*:*:*:*:*:*

part: a version: 9.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductKenexa Lcms Premier (66bab34a-9161-52e9-972f-30c3d647c93a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1143 vulnerable 2026-06-08 05:09:13.126827 Details available
IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM Reference #: 1998874.
Published: 2017-03-27T22:00:00.000Z
Updated: 2024-08-05T13:25:17.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1142 vulnerable 2026-06-08 05:09:13.122066 Details available
IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information. IBM Reference #: 1998874.
Published: 2017-03-27T22:00:00.000Z
Updated: 2024-08-05T13:25:17.310Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9994 vulnerable 2026-06-08 05:08:25.214577 Details available
IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference #: 1976805.
Published: 2017-03-01T21:00:00.000Z
Updated: 2024-08-06T03:07:31.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9993 vulnerable 2026-06-08 05:08:25.214051 Details available
IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference #: 1992067.
Published: 2017-03-01T21:00:00.000Z
Updated: 2024-08-06T03:07:31.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9992 vulnerable 2026-06-08 05:08:25.209674 Details available
IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference #: 1992067.
Published: 2017-03-01T21:00:00.000Z
Updated: 2024-08-06T03:07:31.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5952 vulnerable 2026-06-08 05:07:58.190358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5951 vulnerable 2026-06-08 05:07:58.189878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5950 vulnerable 2026-06-08 05:07:58.189403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5949 vulnerable 2026-06-08 05:07:58.188899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5948 vulnerable 2026-06-08 05:07:58.188269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.