Skip to content
OpenAdvisories
Unscored CVE-2016-5948 EUVD-2016-6882GHSA-wv6v-wvw9-gxcc

IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code …

Published Feb 1, 2017 · Updated Aug 6, 2024 · Assigned by ibm

Vendor: IBM Product: Kenexa LCMS Premier on Cloud

Description

IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products

VendorProductAffectedFixed
IBM Kenexa LCMS Premier on Cloud 9.0, 9.1, 9.2, 9.2.1, 9.3.0, 9.4.0, 9.5.0, 10.0.0, 10.1.0, 10.2.0 —

References