CVE-2016-8935

CVE-2016-8935: vulnerability in IBM Corporation Kenexa LMS on Cloud

Published · Updated

Follow this CVE+ Monitor Kenexa LMS on Cloud

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%
IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999483.
Affected products
IBM Corporation · Kenexa LMS on Cloud
Related CVEs — IBM Corporation Kenexa LMS on Cloud

In the same product, most dangerous first.

CVE-2016-6124—CVE-2016-6124EPSS 2.2%CVE-2016-8932—CVE-2016-8932EPSS 1.9%CVE-2016-8931—CVE-2016-8931EPSS 1.9%CVE-2016-8933—CVE-2016-8933EPSS 1.8%CVE-2016-6126—CVE-2016-6126EPSS 1.8%CVE-2016-8913—CVE-2016-8913EPSS 1.8%