| Max CVSS | 6.5 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-6122 | 4.0 |
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 discloses answers to security questions in a response to authenticated users.
|
08-02-2017 - 18:22 | 01-02-2017 - 20:59 | |
| CVE-2016-6124 | 6.5 |
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.
|
07-02-2017 - 22:23 | 01-02-2017 - 20:59 | |
| CVE-2016-6126 | 4.0 |
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
|
07-02-2017 - 21:05 | 01-02-2017 - 20:59 | |
| CVE-2016-8911 | 3.5 |
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's
|
07-02-2017 - 19:11 | 01-02-2017 - 20:59 | |
| CVE-2016-8913 | 4.0 |
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
|
07-02-2017 - 18:46 | 01-02-2017 - 20:59 | |
| CVE-2016-8912 | 4.0 |
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 stores potentially sensitive information in in log files that could be read by an authenticated user.
|
07-02-2017 - 18:25 | 01-02-2017 - 20:59 | |
| CVE-2016-6123 | 3.5 |
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclos
|
05-02-2017 - 20:32 | 01-02-2017 - 20:59 | |
| CVE-2016-6125 | 3.5 |
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclos
|
05-02-2017 - 20:32 | 01-02-2017 - 20:59 | |
| CVE-2016-8920 | 3.5 |
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclos
|
05-02-2017 - 20:30 | 01-02-2017 - 20:59 |