Approved changes feed: RSS · Atom

cpe:2.3:a:ibm_corporation:kenexa_lms_on_cloud:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm Corporation (d12a6641-f3f1-52ca-aee3-0e264bbe9c89)
ProductKenexa Lms On Cloud (b6a43bb9-f77f-5777-95c6-dd05cd395b1a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-8935 vulnerable 2026-06-08 05:08:22.135812 Details available
IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999483.
Published: 2017-03-31T18:00:00.000Z
Updated: 2024-08-06T02:35:02.355Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8933 vulnerable 2026-06-08 05:08:22.116974 Details available
IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences (/../) to view arbitrary files on the system.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.314Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8932 vulnerable 2026-06-08 05:08:22.116493 Details available
IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.315Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8931 vulnerable 2026-06-08 05:08:22.115927 Details available
IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.320Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8930 vulnerable 2026-06-08 05:08:22.115323 Details available
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.314Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8929 vulnerable 2026-06-08 05:08:22.114803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8928 vulnerable 2026-06-08 05:08:22.107651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8920 vulnerable 2026-06-08 05:08:22.068376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8913 vulnerable 2026-06-08 05:08:22.028643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8912 vulnerable 2026-06-08 05:08:22.028202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8911 vulnerable 2026-06-08 05:08:22.025172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6126 vulnerable 2026-06-08 05:07:58.970619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6125 vulnerable 2026-06-08 05:07:58.970224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6124 vulnerable 2026-06-08 05:07:58.969814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6123 vulnerable 2026-06-08 05:07:58.969359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6122 vulnerable 2026-06-08 05:07:58.965921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5942 vulnerable 2026-06-08 05:07:58.161095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5941 vulnerable 2026-06-08 05:07:58.160629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5940 vulnerable 2026-06-08 05:07:58.160102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5939 vulnerable 2026-06-08 05:07:58.155038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5938 vulnerable 2026-06-08 05:07:58.147795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.