IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.Referenceshttp://www.ibm.com/support/docview.wss?uid=swg21992067http://www.securityfocus.com/bid/94390