Description
IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
IBM Corporation Kenexa LCMS Premier on Cloud
9.0affected9.1affected9.2affected9.2.1affected9.3.0affected9.4.0affected9.5.0affected10.0.0affected10.1.0affected10.2.0affected