Hr Portal Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Hr Portal Project records in CISA KEV

No Hr Portal Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2021-05716 CVE-2021-22855 · GHSA-rmg8-qpvh-whhg

MEDIUM 46

The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02039 Published 2021-02-17 No fix listed CWE-502

TI-2021-05715 CVE-2021-22854 · GHSA-qq7w-3jcr-f834

LOW 36

The HR Portal of Soar Cloud System fails to filter specific parameters.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01582 Published 2021-02-17 No fix listed CWE-89

TI-2021-05714 CVE-2021-22853 · GHSA-w8xc-qr4r-3x3m

LOW 26

The HR Portal of Soar Cloud System fails to manage access control.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.01041 Published 2021-02-17 No fix listed CWE-284