Kenexa Lms
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:kenexa_lms:4.2:*:*:*:*:*:*:*
part: a version: 4.2 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Kenexa Lms (eca59e45-c9ed-5866-bcef-d9530907596e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-8935 |
vulnerable | 2026-06-08 05:08:22.135881 |
Details available
IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999483.
Published: 2017-03-31T18:00:00.000Z
Updated: 2024-08-06T02:35:02.355Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8933 |
vulnerable | 2026-06-08 05:08:22.117032 |
Details available
IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences (/../) to view arbitrary files on the system.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.314Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8932 |
vulnerable | 2026-06-08 05:08:22.116544 |
Details available
IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.315Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8931 |
vulnerable | 2026-06-08 05:08:22.115975 |
Details available
IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.320Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8930 |
vulnerable | 2026-06-08 05:08:22.115483 |
Details available
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.314Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8929 |
vulnerable | 2026-06-08 05:08:22.114871 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8928 |
vulnerable | 2026-06-08 05:08:22.111399 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5942 |
vulnerable | 2026-06-08 05:07:58.161142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5941 |
vulnerable | 2026-06-08 05:07:58.160680 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5940 |
vulnerable | 2026-06-08 05:07:58.160174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5938 |
vulnerable | 2026-06-08 05:07:58.150534 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.