Scshr vulnerabilities
We track 7 vulnerabilities in Scshr products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on June 6, 2025.
Latest Scshr vulnerabilities
- 7.5 High severity
HRD Human Resource Management System: Missing Authentication for Critical Functionality
A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions.
- 7.5 High severity
HRD Human Resource Management System: Missing Authorization
A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to modify system settings without prior authorization.
- 7.5 High severity
HRD Human Resource Management System: External Control of File Name or Path
An external control of file name or path vulnerability in the delete file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to delete partial files by specifying arbitrary file paths.
- 9.8 Critical severity
HRD Human Resource Management System: Unrestricted Upload of File with Dangerous Type
An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file.
- 7.5 High severity
HRD Human Resource Management System: External Control of File Name or Path
An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to obtain partial files by specifying arbitrary file paths.
- 9.8 Critical severity
HRD Human Resource Management System: Deserialization of Untrusted Data
A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a crafted serialized object.
- 8.8 High severity
The notification emails sent by Soar Cloud HR Portal contain a link with a embedded session.
The notification emails sent by Soar Cloud HR Portal contain a link with a embedded session. The expiration of the session is not properly configured, remaining valid for more than 7 days and can be reused.