Vulnerabilities

TI-2017-00933 CVE-2017-1143 · GHSA-v652-34jm-qx9r

Information disclosure in IBM Kenexa LCMS Premier on Cloud

LOW 26

IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.

CVSS 3.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00917 Published 2017-03-27 No fix listed CWE-200

TI-2017-00932 CVE-2017-1142 · GHSA-g48m-88x6-h6mq

Information disclosure in IBM Kenexa LCMS Premier on Cloud

LOW 31

IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01224 Published 2017-03-27 No fix listed CWE-200

TI-2016-08096 CVE-2016-9994 · GHSA-4w3j-8hm6-fjqq

SQL injection in IBM Kenexa LCMS Premier on Cloud

LOW 33

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection.

CVSS 3.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00853 Published 2017-03-01 No fix listed CWE-89

TI-2016-08095 CVE-2016-9993 · GHSA-xjgw-5w55-wv5g

SQL injection in IBM Kenexa LCMS Premier on Cloud

LOW 33

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection.

CVSS 3.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00853 Published 2017-03-01 No fix listed CWE-89

TI-2016-08094 CVE-2016-9992 · GHSA-fxqv-865x-5g7j

SQL injection in IBM Kenexa LCMS Premier on Cloud

LOW 33

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection.

CVSS 3.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00853 Published 2017-03-01 No fix listed CWE-89

TI-2016-05142 CVE-2016-5952 · GHSA-w47v-f876-jjh4

SQL injection in IBM Kenexa LCMS Premier on Cloud

MEDIUM 41

IBM Kenexa LCMS Premier on Cloud is vulnerable to SQL injection.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01351 Published 2017-02-01 No fix listed CWE-89

TI-2016-05141 CVE-2016-5951 · GHSA-f6mw-9vw8-23jg

Cross-site scripting in IBM Kenexa LCMS Premier on Cloud

LOW 25

IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0054 Published 2017-02-01 No fix listed CWE-79

TI-2016-05140 CVE-2016-5950 · GHSA-r49p-mffc-w72j

Credentials management flaw in IBM Kenexa LCMS Premier on Cloud

LOW 31

IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00988 Published 2017-02-01 No fix listed CWE-255

TI-2016-05139 CVE-2016-5949 · GHSA-gqc7-8m64-6r9x

IBM Kenexa LCMS Premier on Cloud could allow an authenticated user to obtain sensitive…

LOW 23

IBM Kenexa LCMS Premier on Cloud could allow an authenticated user to obtain sensitive user data with a specially crafted HTTP request.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01284 Published 2017-02-01 No fix listed CWE-254

TI-2016-05138 CVE-2016-5948 · GHSA-wv6v-wvw9-gxcc

Cross-site scripting in IBM Kenexa LCMS Premier on Cloud

LOW 25

IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00538 Published 2017-02-01 No fix listed CWE-79

TI-2016-05127 CVE-2016-5937 · GHSA-g68f-8xj5-grq7

Cross-site request forgery in IBM Kenexa LCMS Premier on Cloud

LOW 39

IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00554 Published 2017-02-01 No fix listed CWE-352

Vulnerabilities

Filters