Cross-Site Scripting Vulnerability in IBM Kenexa LCMS Premier on Cloud
CVE-2016-5951
5.4MEDIUM
Summary
IBM Kenexa LCMS Premier on Cloud has a cross-site scripting vulnerability that permits attackers to inject malicious JavaScript code into the web user interface. This can result in altered functionality and unauthorized disclosure of sensitive information, such as user credentials, within a trusted session. The vulnerability can compromise user trust and lead to potential data breaches if not addressed.
Affected Version(s)
Kenexa LCMS Premier on Cloud 9.0
Kenexa LCMS Premier on Cloud 9.1
Kenexa LCMS Premier on Cloud 9.2
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved