Learning Digital vulnerabilities
We track 4 vulnerabilities in Learning Digital products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on February 17, 2025.
Latest Learning Digital vulnerabilities
- 8.8 High severity
Orca HCM: Improper Neutralization of Special Elements used in an SQL Command
Orca HCM from Learning Digital has a SQL Injection vulnerability, allowing attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents.
- 8.8 High severity
Orca HCM: Unrestricted Upload of File with Dangerous Type
Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web shells
- 9.8 Critical severity
Orca HCM: Weak Authentication
Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any user.
- 9.8 Critical severity
Orca HCM: Missing Authentication for Critical Functionality
Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote attacker to exploit this functionality to create an account with administrator privilege and subsequently use it to log in.