CVE-2016-6124

概要

参考情報

• ibm.com/support/docview.wss · Vendor Advisory
• securityfocus.com/bid/94306 · Third Party Advisory

kenexa lms on cloud のその他の脆弱性

• CVE-2016-8920中 5.4IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…
• CVE-2016-8913中 6.5IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system. An attacker could send a…
• CVE-2016-8912中 4.3IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 stores potentially sensitive information in in log files that could be read by an authenticat…
• CVE-2016-8911中 5.4IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a vi…
• CVE-2016-6126中 6.5IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system. An attacker could send a…