Learningdigital - vulnerabilities (CVEs)
11 CVEs in 1 products, 0 in the last 30 days, newest from 2025-02-17.
Products
- Orca Hcm - 11 CVEs
Newest CVEs of Learningdigital
- CVE-2025-1389 - CVSS 8.8 (high), 2025-02-17: Orca HCM from Learning Digital has a SQL Injection vulnerability, allowing attackers with regular privileges to inject arbitrary SQL commands to read, modify,…
- CVE-2025-1388 - CVSS 8.8 (high), 2025-02-17: Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web shells
- CVE-2025-1387 - CVSS 9.8 (critical), 2025-02-17: Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any user.
- CVE-2024-8585 - CVSS 6.5 (medium), 2024-09-09: Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionality, allowing a remote attacker with regular…
- CVE-2024-8584 - CVSS 9.8 (critical), 2024-09-09: Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote attacker to exploit this functionality to create…
- CVE-2021-35966 - CVSS 6.1 (medium), 2021-07-19: The specific function of the Orca HCM digital learning platform does not filter input parameters properly, which causing the URL can be redirected to any…
- CVE-2021-35965 - CVSS 9.8 (critical), 2021-07-19: The Orca HCM digital learning platform uses a weak factory default administrator password, which is hard-coded in the source code of the webpage in plain…
- CVE-2021-35968 - CVSS 4.3 (medium), 2021-07-19: The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly. Remote attackers can access the…
- CVE-2021-35964 - CVSS 9.8 (critical), 2021-07-19: The management page of the Orca HCM digital learning platform does not perform identity verification, which allows remote attackers to execute the management…
- CVE-2021-35967 - CVSS 5.3 (medium), 2021-07-19: The directory page parameter of the Orca HCM digital learning platform does not filter special characters. Remote attackers can access the system directory…
- CVE-2021-35963 - CVSS 9.8 (critical), 2021-07-19: The specific parameter of upload function of the Orca HCM digital learning platform does not filter file format, which allows remote unauthenticated attackers…
