Learning Digital

5 CVEs across 1 Learning Digital products. Browse Learning Digital vulnerabilities, severities, and proof-of-concept exploits.

Learning Digital products with known CVEs

ProductCVEs
Orca Hcm5
Learning Digital CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-1389High8.82025-02-17Orca HCM from Learning Digital has a SQL Injection vulnerability, allowing attackers with regular privileges to inject arbitrary SQL commands to read, modify…
CVE-2025-1388High8.82025-02-17Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web shells
CVE-2025-1387Critical9.82025-02-17Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any user.
CVE-2024-8585Medium6.52024-09-09Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionality, allowing a remote attacker with regular privi…
CVE-2024-8584Critical9.82024-09-09Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote attacker to exploit this functionality to create an…