CVE-2025-48784 in HRD Human Resource Management System

Riassunto

di MITRE • 06/06/2025

A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to modify system settings without prior authorization.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: ZUSO ART
• Prenotare: 26/05/2025
• Divulgazione: 06/06/2025
• Moderazione: accettato
• Voce: VDB-311359
• CPE: pronto
• CWE: CWE-862 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.00316
• KEV: no
• Attività: molto basso
• Settore: Chemical, Hospital, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-48784
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-48784
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-48784/