Security Advisory

CVE-2016-8935

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-03-31 18:00:00

Last updated 2024-08-06 02:35:02

Assigner ibm

CVSS score not scored

State PUBLISHED

Description

IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999483.

← Browse all CVEs View on cve.org ↗