Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2021-22855

Soar Cloud System Co., Ltd. HR Portal - Arbitrary Code Execution

The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can send malicious serialized objects to execute arbitrary commands.

CVSS 3.1 · 9.8 Critical EPSS 2.1% KEV · Not listed
Vendors
Hr Portal Project
Products
Hr Portal
CVE-2021-22854

Soar Cloud System Co., Ltd. HR Portal - SQL Injection

The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without privilege.

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Hr Portal Project
Products
Hr Portal
CVE-2021-22853

Soar Cloud System Co., Ltd. HR Portal - Broken Access Control

The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data packet, such as user’s login information, further causing the login function not to work.

CVSS 3.1 · 5.4 Medium EPSS 1.1% KEV · Not listed
Vendors
Hr Portal Project
Products
Hr Portal