CVE-2016-9993

High

Published: 01/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Kenexa LCMS Premier versions 9.0 and 10.0.0 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, allowing them to view, add, modify, or delete information in the back-end database.

Risk Assessment

This vulnerability could lead to unauthorized access to sensitive data, posing a significant security risk to the organization.

Recommendation

It is recommended to update to the latest version of the software and implement appropriate security measures to minimize the risk of SQL injection attacks.

Other vulnerabilities in IBM Kenexa LCMS Premier 9.0, 10.0.0

CVE-2016-9992High
IBM Kenexa LCMS Premier versions 9.0 and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, allowing them to view, add, modify, or delete information in the back-end database.

Original NVD description (English source)

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference #: 1992067.