CVE-2025-1387

Critical

Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the…

twcert·CWE-1390·Published 2025-02-17

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

155 chars

Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any user.

NVDen

155 chars

Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any user.

Orca HCM de LEARNING DIGITAL tiene una vulnerabilidad de autenticación inadecuada, que permite a atacantes remotos no autenticados iniciar sesión en el sistema como cualquier usuario.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H