Soar Cloud vulnerabilities
We track 2 vulnerabilities in Soar Cloud products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 14, 2024.
2vulnerabilities
0critical
2high
0exploited
8.3average CVSS score
Latest Soar Cloud vulnerabilities
- 8.8 High severity
The notification emails sent by Soar Cloud HR Portal contain a link with a embedded session.
The notification emails sent by Soar Cloud HR Portal contain a link with a embedded session. The expiration of the session is not properly configured, remaining valid for more than 7 days and can be reused.
- 7.8 High severity
HR Portal: Weak Password Recovery Mechanism for Forgotten Password
Soar Cloud Ltd. HR Portal has a weak Password Recovery Mechanism for Forgotten Password. The reset password link sent out through e-mail, and the link will remain valid after the password has been reset and after the expected expiration date. An attacker with