Skip to content
OpenAdvisories
Unscored CVE-2016-9993 EUVD-2016-10776GHSA-xjgw-5w55-wv5g

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL stateme…

Published Mar 1, 2017 · Updated Aug 6, 2024 · Assigned by ibm

Vendor: IBM Product: Kenexa LCMS Premier on Cloud

Description

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference #: 1992067.

Affected products

VendorProductAffectedFixed
IBM Kenexa LCMS Premier on Cloud unspecified, 9.0, 9.1, 9.2, 9.2.1, 9.3.0, 9.4.0, 9.5.0, 10.0.0, 10.1.0, 10.2.0 —

References