CVE-2016-9994

Summary

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference #: 1976805.

Affected Software

VendorProductVersion RangeStatus
IBM CorporationKenexa LCMS Premier on Cloudunspecifiedaffected
IBM CorporationKenexa LCMS Premier on Cloud9.0affected
IBM CorporationKenexa LCMS Premier on Cloud9.1affected
IBM CorporationKenexa LCMS Premier on Cloud9.2affected
IBM CorporationKenexa LCMS Premier on Cloud9.2.1affected
IBM CorporationKenexa LCMS Premier on Cloud9.3.0affected
IBM CorporationKenexa LCMS Premier on Cloud9.4.0affected
IBM CorporationKenexa LCMS Premier on Cloud9.5.0affected
IBM CorporationKenexa LCMS Premier on Cloud10.0.0affected
IBM CorporationKenexa LCMS Premier on Cloud10.1.0affected
IBM CorporationKenexa LCMS Premier on Cloud10.2.0affected

Weaknesses

  • Data Manipulation

ADP Enrichment

CVE Program Container

Additional References

References