Orca HCM vulnerabilities
4 known vulnerabilities in Orca HCM from Learning Digital. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Orca HCM: Improper Neutralization of Special Elements used in an SQL Command
Orca HCM from Learning Digital has a SQL Injection vulnerability, allowing attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents.
- 8.8 High severity
Orca HCM: Unrestricted Upload of File with Dangerous Type
Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web shells
- 9.8 Critical severity
Orca HCM: Weak Authentication
Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any user.
- 9.8 Critical severity
Orca HCM: Missing Authentication for Critical Functionality
Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote attacker to exploit this functionality to create an account with administrator privilege and subsequently use it to log in.