Approved changes feed: RSS · Atom
cpe:2.3:a:soar_cloud_system_co.,_ltd.:hr_portal:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Soar Cloud System Co., Ltd. (d2d26505-47c8-5451-bdef-94e96877e2d4) |
|---|---|
| Product | Hr Portal (628d551c-b23d-54fb-af42-49a31dabfd1e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-22855 |
vulnerable | 2026-06-08 05:30:01.649174 |
Soar Cloud System Co., Ltd. HR Portal - Arbitrary Code Execution
CRITICAL (9.8)
The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can send malicious serialized objects to execute arbitrary commands.
Published: 2021-02-17T13:30:20.743Z
Updated: 2024-09-16T20:52:52.968Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22854 |
vulnerable | 2026-06-08 05:30:01.648792 |
Soar Cloud System Co., Ltd. HR Portal - SQL Injection
HIGH (7.5)
The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without privilege.
Published: 2021-02-17T13:30:20.119Z
Updated: 2024-09-16T22:56:59.729Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22853 |
vulnerable | 2026-06-08 05:30:01.647646 |
Soar Cloud System Co., Ltd. HR Portal - Broken Access Control
MEDIUM (5.4)
The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data packet, such as user’s login information, further causing the login function not to work.
Published: 2021-02-17T13:30:19.537Z
Updated: 2024-09-17T04:04:36.098Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.