CVE-2016-5948

Summary

IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected Software

VendorProductVersion RangeStatus
IBM CorporationKenexa LCMS Premier on Cloud9.0affected
IBM CorporationKenexa LCMS Premier on Cloud9.1affected
IBM CorporationKenexa LCMS Premier on Cloud9.2affected
IBM CorporationKenexa LCMS Premier on Cloud9.2.1affected
IBM CorporationKenexa LCMS Premier on Cloud9.3.0affected
IBM CorporationKenexa LCMS Premier on Cloud9.4.0affected
IBM CorporationKenexa LCMS Premier on Cloud9.5.0affected
IBM CorporationKenexa LCMS Premier on Cloud10.0.0affected
IBM CorporationKenexa LCMS Premier on Cloud10.1.0affected
IBM CorporationKenexa LCMS Premier on Cloud10.2.0affected

Weaknesses

  • Cross-Site Scripting

ADP Enrichment

CVE Program Container

Additional References

References