CVSS 3.0
5.7 mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:NCVE-2016-5941
Medium (5.7) in ibm kenexa lms. EPSS 1.6% chance of exploitation in the next 30 days.
IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences (/../) to view arbitrary files on the system.
Severity
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:kenexa_lms