CVE-2016-6126

CVE-2016-6126: vulnerability in IBM Corporation Kenexa LMS on Cloud

Published · Updated

Follow this CVE+ Monitor Kenexa LMS on Cloud

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.8%
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Affected products
IBM Corporation · Kenexa LMS on Cloud
Related CVEs — IBM Corporation Kenexa LMS on Cloud

In the same product, most dangerous first.

CVE-2016-6124—CVE-2016-6124EPSS 2.2%CVE-2016-8931—CVE-2016-8931EPSS 1.9%CVE-2016-8932—CVE-2016-8932EPSS 1.9%CVE-2016-8933—CVE-2016-8933EPSS 1.8%CVE-2016-8913—CVE-2016-8913EPSS 1.8%CVE-2016-5941—CVE-2016-5941EPSS 1.6%