Sql injection

2017-03-0121:59:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.5%

JSON

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference #: 1976805.

CPENameOperatorVersion
kenexa_lcms_premiereq9.1
kenexa_lcms_premiereq9.5
kenexa_lcms_premiereq10.0
kenexa_lcms_premiereq9.0
kenexa_lcms_premiereq9.4
kenexa_lcms_premiereq9.3
kenexa_lcms_premiereq9.2
kenexa_lcms_premiereq9.2.1

Name	Operator	Version
kenexa_lcms_premier	eq	9.1
kenexa_lcms_premier	eq	9.5
kenexa_lcms_premier	eq	10.0
kenexa_lcms_premier	eq	9.0
kenexa_lcms_premier	eq	9.4
kenexa_lcms_premier	eq	9.3
kenexa_lcms_premier	eq	9.2
kenexa_lcms_premier	eq	9.2.1

References

www.ibm.com/support/docview.wss?uid=swg21976805