Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:kenexa_lms:5.2:*:*:*:*:*:*:*

part: a version: 5.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductKenexa Lms (eca59e45-c9ed-5866-bcef-d9530907596e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-8933 vulnerable 2026-06-08 05:08:22.117138 Details available
IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences (/../) to view arbitrary files on the system.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.314Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8932 vulnerable 2026-06-08 05:08:22.116646 Details available
IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.315Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8931 vulnerable 2026-06-08 05:08:22.116078 Details available
IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.320Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8930 vulnerable 2026-06-08 05:08:22.115593 Details available
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.314Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8929 vulnerable 2026-06-08 05:08:22.114978 Details available
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.312Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8928 vulnerable 2026-06-08 05:08:22.114363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5942 vulnerable 2026-06-08 05:07:58.161247 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5941 vulnerable 2026-06-08 05:07:58.160782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5940 vulnerable 2026-06-08 05:07:58.160284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5938 vulnerable 2026-06-08 05:07:58.154596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.