CVE-2016-6124
HighSummary
IBM Kenexa LMS on Cloud versions 13.1 and 13.2 - 13.2.4 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code remotely, posing a serious threat to the integrity and security of the system.
Recommendation
It is recommended to update to the latest version of the software to mitigate the risks associated with this vulnerability.
Other vulnerabilities in IBM Kenexa LMS on Cloud
See all- CVE-2016-8932High
IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.
- CVE-2016-8931High
IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.
- CVE-2016-8930High
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
- CVE-2016-8928High
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
Original NVD description (English source)
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.