CVE-2016-8932

Published: Feb 1, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.

Affected (8)

Products: Ibm: Kenexa Lms

Ibm

1 product

Kenexa Lms

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Kenexa Lms	Version 4.1
Ibm Kenexa Lms	Version 4.2.2
Ibm Kenexa Lms	Version 4.2.3
Ibm Kenexa Lms	Version 4.2.4
Ibm Kenexa Lms	Version 4.2
Ibm Kenexa Lms	Version 5.0
Ibm Kenexa Lms	Version 5.1
Ibm Kenexa Lms	Version 5.2