CVE-2016-9992

High

Published: 01/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Kenexa LCMS Premier versions 9.0 and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, allowing them to view, add, modify, or delete information in the back-end database.

Risk Assessment

This vulnerability could lead to unauthorized access to sensitive data, posing a serious threat to the organization's security.

Recommendation

It is recommended to update to the latest version of the software and implement safeguards against SQL injection attacks.

Other vulnerabilities in IBM Kenexa LCMS Premier 9.0, 10.0.0

CVE-2016-9993High
IBM Kenexa LCMS Premier versions 9.0 and 10.0.0 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, allowing them to view, add, modify, or delete information in the back-end database.

Original NVD description (English source)

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference #: 1992067.