← CVE Intelligence

CVE-2016-5948

IBM Corporation / Kenexa LCMS Premier on Cloud PUBLISHED

Description (CNA)

IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected (CNA)

Vendor / productVersions
IBM Corporation / Kenexa LCMS Premier on Cloudaffected 9.0; affected 9.1; affected 9.2; affected 9.2.1; affected 9.3.0; affected 9.4.0; affected 9.5.0; affected 10.0.0; affected 10.1.0; affected 10.2.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.