Approved changes feed: RSS · Atom
cpe:2.3:a:learningdigital.com,_inc.:orca_hcm:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Learningdigital.Com, Inc. (d71fb835-5603-56b6-900f-a7ed3bb5c669) |
|---|---|
| Product | Orca Hcm (fe7408e7-63ee-5ba0-ae94-cfd47fcabdbd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-35968 |
vulnerable | 2026-06-08 05:32:49.473163 |
Learningdigital.com, Inc. Orca HCM - Path Traversal-2
MEDIUM (4.3)
The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly. Remote attackers can access the system directory thru Path Traversal with users’ privileges.
Published: 2021-07-19T11:55:47.851Z
Updated: 2024-09-17T01:01:11.960Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35967 |
vulnerable | 2026-06-08 05:32:49.472649 |
Learningdigital.com, Inc. Orca HCM - Path Traversal-1
MEDIUM (5.3)
The directory page parameter of the Orca HCM digital learning platform does not filter special characters. Remote attackers can access the system directory thru Path Traversal without logging in.
Published: 2021-07-19T11:55:45.090Z
Updated: 2024-09-16T16:27:48.675Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35966 |
vulnerable | 2026-06-08 05:32:49.472217 |
Learningdigital.com, Inc. Orca HCM - URL Redirection to Untrusted Site ('Open Redirect')
MEDIUM (6.1)
The specific function of the Orca HCM digital learning platform does not filter input parameters properly, which causing the URL can be redirected to any website. Remote attackers can use the vulnerability to execute phishing attacks.
Published: 2021-07-19T11:55:43.534Z
Updated: 2024-09-16T17:54:15.142Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35965 |
vulnerable | 2026-06-08 05:32:49.471788 |
Learningdigital.com, Inc. Orca HCM - Hard-code password
CRITICAL (9.8)
The Orca HCM digital learning platform uses a weak factory default administrator password, which is hard-coded in the source code of the webpage in plain text, thus remote attackers can obtain administrator’s privilege without logging in.
Published: 2021-07-19T11:55:41.987Z
Updated: 2024-09-17T01:11:36.678Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35964 |
vulnerable | 2026-06-08 05:32:49.471223 |
Learningdigital.com, Inc. Orca HCM - Broken Authentication
HIGH (7.3)
The management page of the Orca HCM digital learning platform does not perform identity verification, which allows remote attackers to execute the management function without logging in, access members’ information, modify and delete the courses in system, thus causing users fail to access the learning content.
Published: 2021-07-19T11:55:40.300Z
Updated: 2024-09-16T23:11:42.591Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35963 |
vulnerable | 2026-06-08 05:32:49.469793 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.