Login Request a demo
KL
Product
Kenexa Lcms Premier
by Ibm · last CVE Mar 27, 2017
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 5Medium 6Low 0
Severity
All severities11Critical0High5Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Kenexa Lcms Premier to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-1142
6.5
1%
Mar 27
IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in…
Affected: 9.1; 9.2; 9.2.1; 9.3; 9.4; 9.5; +3 more
CVE-2016-5950
6.5
1%
Feb 1
IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user
Affected: 9.0; 9.1; 9.2; 9.2.1; 9.3; 9.4; +4 more
CVE-2016-5948
5.4
1%
Feb 1
IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting
Affected: 9.0; 9.1; 9.2; 9.2.1; 9.3; 9.4; +4 more
CVE-2016-5951
5.4
1%
Feb 1
IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting
Affected: 9.1; 9.2; 9.3; 9.4; 9.5; 10.0; +2 more
CVE-2017-1143
5.3
1%
Mar 27
IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport…
Affected: 9.1; 9.2; 9.2.1; 9.3; 9.4; 9.5; +3 more
CVE-2016-5949
4.3
1%
Feb 1
IBM Kenexa LCMS Premier on Cloud could allow an authenticated user to obtain sensitive user data with a specially crafted HTTP request
Affected: 9.1; 9.2; 9.3; 9.4; 9.5; 10.0; +1 more
Showing 6