CVE Vulnerabilities

CVE-2016-8911

Published: Feb 01, 2017 | Modified: Feb 07, 2017
CVSS 3.x
5.4
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 2.x
3.5 LOW
AV:N/AC:M/Au:S/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victims click actions and possibly launch further attacks against the victim.

Affected Software

Name Vendor Start Version End Version
Kenexa_lms_on_cloud Ibm 13.1 (including) 13.1 (including)
Kenexa_lms_on_cloud Ibm 13.2 (including) 13.2 (including)
Kenexa_lms_on_cloud Ibm 13.2.2 (including) 13.2.2 (including)
Kenexa_lms_on_cloud Ibm 13.2.3 (including) 13.2.3 (including)
Kenexa_lms_on_cloud Ibm 13.2.4 (including) 13.2.4 (including)

References