HR Portal vulnerabilities

2 known vulnerabilities in HR Portal from Soar Cloud. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  The notification emails sent by Soar Cloud HR Portal contain a link with a embedded session.

  CVE-2024-5995Jun 14, 2024Soar Cloud

  The notification emails sent by Soar Cloud HR Portal contain a link with a embedded session. The expiration of the session is not properly configured, remaining valid for more than 7 days and can be reused.

• 7.8 High severity

  HR Portal: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2023-34357Sep 7, 2023Soar Cloud

  Soar Cloud Ltd. HR Portal has a weak Password Recovery Mechanism for Forgotten Password. The reset password link sent out through e-mail, and the link will remain valid after the password has been reset and after the expected expiration date. An attacker with