CVE-2025-1387

Published Feb 17, 2025

Last updated 10 months ago

Overview

Description
Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any user.
Source
twcert@cert.org.tw
NVD status
Analyzed
Products
orca_hcm

Risk scores

CVSS 3.1

Type
Primary
Base score
9.8
Impact score
5.9
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

twcert@cert.org.tw
CWE-1390

Social media

Hype score
Not currently trending

Configurations