CVE-2016-9994

Опубликовано: 01 мар. 2017

Источник: nvd

CVSS3: 7.1

CVSS2: 6.5

EPSS Низкий

Описание

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference #: 1976805.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg21976805
Patch
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21976805
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:kenexa_lcms_premier:9.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:kenexa_lcms_premier:9.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:kenexa_lcms_premier:9.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:kenexa_lcms_premier:9.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:kenexa_lcms_premier:9.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:kenexa_lcms_premier:9.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:kenexa_lcms_premier:9.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:kenexa_lcms_premier:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00164

Низкий

7.1 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-4w3j-8hm6-fjqq