Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Scshr Clear all filters
TI-2025-30982 CVE-2025-48784 · GHSA-xrm3-38hq-hp4q

Soar Cloud HRD Human Resource Management System - Missing Authorization

Priority MEDIUM 46

A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to modify system settings without prior authorization.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00383 Published 2025-06-06 No fix listed CWE-862
TI-2025-30980 CVE-2025-48782 · GHSA-9qfh-f8rq-x8wr

Soar Cloud HRD Human Resource Management System - Unrestricted Upload of File with Dangerous Type

Priority MEDIUM 50

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary s…

CVSS 4.0CRITICAL 9.9 Network No auth No interaction EPSS 0.00539 Published 2025-06-06 No fix listed CWE-434
TI-2025-30978 CVE-2025-48780 · GHSA-3v97-26cx-c3v7

Soar Cloud HRD Human Resource Management System - Deserialization of Untrusted Data

Priority MEDIUM 50

A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system command…

CVSS 4.0CRITICAL 9.9 Network No auth No interaction EPSS 0.00563 Published 2025-06-06 No fix listed CWE-502
TI-2025-04659 CVE-2025-5192 · GHSA-cp8j-3rj5-xc54

Soar Cloud HRD Human Resource Management System - Missing Authentication for Critical Function

Priority MEDIUM 49

A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00535 Published 2025-06-06 No fix listed CWE-306