CVE-2025-48784 in HRD Human Resource Management System

Résumé

par MITRE • 06/06/2025

A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to modify system settings without prior authorization.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: ZUSO ART
• Réserver: 26/05/2025
• Divulgation: 06/06/2025
• Modérer: accepté
• Entrée: VDB-311359
• CPE: prêt
• CWE: CWE-862 (confirmé)
• CVSS: 7.5 (NVD)
• EPSS: 0.00316
• KEV: non
• Activités: très faible
• Secteur: Industry, Insurance, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-48784
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-48784
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-48784/