Learningdigital.com, Inc. Orca Hcm
6 CVEs affecting Learningdigital.com, Inc. Orca Hcm. Latest disclosed: 2021-07-19. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-35965 | Critical | 9.8 | 2021-07-19 | The Orca HCM digital learning platform uses a weak factory default administrator password, which is hard-coded in the source code of the webpage in plain text… |
CVE-2021-35963 | Critical | 9.8 | 2021-07-19 | The specific parameter of upload function of the Orca HCM digital learning platform does not filter file format, which allows remote unauthenticated attackers… |
CVE-2021-35964 | High | 7.3 | 2021-07-19 | The management page of the Orca HCM digital learning platform does not perform identity verification, which allows remote attackers to execute the management f… |
CVE-2021-35966 | Medium | 6.1 | 2021-07-19 | The specific function of the Orca HCM digital learning platform does not filter input parameters properly, which causing the URL can be redirected to any websi… |
CVE-2021-35967 | Medium | 5.3 | 2021-07-19 | The directory page parameter of the Orca HCM digital learning platform does not filter special characters. Remote attackers can access the system directory thr… |
CVE-2021-35968 | Medium | 4.3 | 2021-07-19 | The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly. Remote attackers can access the system… |