Skip to content
OpenAdvisories
Unscored CVE-2016-9994 EUVD-2016-10777GHSA-4w3j-8hm6-fjqq

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL stateme…

Published Mar 1, 2017 · Updated Aug 6, 2024 · Assigned by ibm

Vendor: IBM Product: Kenexa LCMS Premier on Cloud

Description

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference #: 1976805.

Affected products

VendorProductAffectedFixed
IBM Kenexa LCMS Premier on Cloud unspecified, 9.0, 9.1, 9.2, 9.2.1, 9.3.0, 9.4.0, 9.5.0, 10.0.0, 10.1.0, 10.2.0 —

References