Soar Cloud System Co., Ltd. Hr Portal
3 CVEs affecting Soar Cloud System Co., Ltd. Hr Portal. Latest disclosed: 2021-02-17. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-22855 | Critical | 9.8 | 2021-02-17 | The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can send malicious serialized objects to execu… |
CVE-2021-22854 | High | 7.5 | 2021-02-17 | The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without priv… |
CVE-2021-22853 | Medium | 5.4 | 2021-02-17 | The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data pack… |