CVE-2025-1388 in Orca HCM

Riassunto

di MITRE • 17/02/2025

Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web shells

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: Twcert
• Prenotare: 17/02/2025
• Divulgazione: 17/02/2025
• Moderazione: accettato
• Voce: VDB-296018
• CPE: pronto
• CWE: CWE-434 (confermato)
• CVSS: 8.8 (CNA)
• EPSS: 0.00483
• KEV: no
• Attività: molto basso
• Settore: Pharma, Police, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-1388
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-1388
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-1388/