Skip to content
OpenAdvisories
Unscored CVE-2016-8911 EUVD-2016-9736GHSA-5gfr-qc5f-grmj

IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a v…

Published Feb 1, 2017 · Updated Aug 6, 2024 · Assigned by ibm

Description

IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.

Affected products

VendorProductAffectedFixed
IBM Kenexa LMS on Cloud 13.0, 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4, 14.0.0, 14.1.0, 14.2.0 —

References