CVE-2025-5192

A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions.

Score

CVSS 4.0 9.3 Critical

Status

Analyzed - ART@zuso.ai

Published

2025-06-06

Last modified

2025-06-06

Weaknesses

CWE-306

Affected products

• Hr Portal (Scshr)
• Hrd Human Resource Management System (Soar Cloud System Co. Ltd.)

References

• https://zuso.ai/advisory/za-2025-04