Description
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
IBM Corporation Kenexa LMS on Cloud
13.0affected13.1affected13.2affected13.2.2affected13.2.3affected13.2.4affected14.0.0affected14.1.0affected14.2.0affected