Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2016-8935

IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999483.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 45.7%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
Products affected by CVE-2016-8935
  • Ibm » Kenexa Lms » Version: 4.1
    cpe:2.3:a:ibm:kenexa_lms:4.1
  • Ibm » Kenexa Lms » Version: 4.2
    cpe:2.3:a:ibm:kenexa_lms:4.2
  • Ibm » Kenexa Lms » Version: 4.2.2
    cpe:2.3:a:ibm:kenexa_lms:4.2.2
  • Ibm » Kenexa Lms » Version: 4.2.3
    cpe:2.3:a:ibm:kenexa_lms:4.2.3
  • Ibm » Kenexa Lms » Version: 4.2.4
    cpe:2.3:a:ibm:kenexa_lms:4.2.4
  • Ibm » Kenexa Lms » Version: 5.0
    cpe:2.3:a:ibm:kenexa_lms:5.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved