CVE-2016-6124
N/A
N/A
Summary
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM Corporation | Kenexa LMS on Cloud | 13.0 | affected |
| IBM Corporation | Kenexa LMS on Cloud | 13.1 | affected |
| IBM Corporation | Kenexa LMS on Cloud | 13.2 | affected |
| IBM Corporation | Kenexa LMS on Cloud | 13.2.2 | affected |
| IBM Corporation | Kenexa LMS on Cloud | 13.2.3 | affected |
| IBM Corporation | Kenexa LMS on Cloud | 13.2.4 | affected |
| IBM Corporation | Kenexa LMS on Cloud | 14.0.0 | affected |
| IBM Corporation | Kenexa LMS on Cloud | 14.1.0 | affected |
| IBM Corporation | Kenexa LMS on Cloud | 14.2.0 | affected |
Weaknesses
- Gain Access
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.