IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victims click actions and possibly launch further attacks against the victim.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kenexa_lms_on_cloud | Ibm | 13.1 (including) | 13.1 (including) |
| Kenexa_lms_on_cloud | Ibm | 13.2 (including) | 13.2 (including) |
| Kenexa_lms_on_cloud | Ibm | 13.2.2 (including) | 13.2.2 (including) |
| Kenexa_lms_on_cloud | Ibm | 13.2.3 (including) | 13.2.3 (including) |
| Kenexa_lms_on_cloud | Ibm | 13.2.4 (including) | 13.2.4 (including) |