scshr records

8 published records for vendor scshr.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2025-48780No exploit	Soar Cloud HRD Human Resource Management System - Deserialization of Untrusted Datascshr · hr portal · CWE-502 pre-auth RCE Deserialization	Critical9.9	—	0.5%	Jun 6, 2025
39Monitor	CVE-2025-48782No exploit	Soar Cloud HRD Human Resource Management System - Unrestricted Upload of File with Dangerous Typescshr · hr portal · CWE-434 pre-auth RCE File upload	Critical9.9	—	0.5%	Jun 6, 2025
37Monitor	CVE-2025-5192No exploit	Soar Cloud HRD Human Resource Management System - Missing Authentication for Critical Functionscshr · hr portal · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.5%	Jun 6, 2025
35Monitor	CVE-2025-48783No exploit	Soar Cloud HRD Human Resource Management System - External Control of File Name or Pathscshr · hr portal · CWE-73 Pre-auth Path traversal	High8.8	—	0.4%	Jun 6, 2025
35Monitor	CVE-2024-5995No exploit	Soar Cloud HR Portal - Insufficient Session Expirationsoar cloud · hr portal · CWE-613 Pre-auth	High8.8	—	0.4%	Jun 14, 2024
35Monitor	CVE-2025-48784No exploit	Soar Cloud HRD Human Resource Management System - Missing Authorizationscshr · hr portal · CWE-862 Pre-auth Broken access control (IDOR)	High8.8	—	0.4%	Jun 6, 2025
34Monitor	CVE-2025-48781No exploit	Soar Cloud HRD Human Resource Management System - External Control of File Name or Pathscshr · hr portal · CWE-73 Pre-auth Path traversal	High8.7	—	0.4%	Jun 6, 2025
31Monitor	CVE-2023-34357No exploit	Soar Cloud Ltd. HR Portal - Weak Password Recovery Mechanism for Forgotten Passwordscshr · hr portal · CWE-640	High7.8	—	0.2%	Sep 6, 2023

CVE-2025-48780
39Monitor
Soar Cloud HRD Human Resource Management System - Deserialization of Untrusted Data
CriticalCVSS 9.9No exploitEPSS 1%
- pre-auth RCE
- Deserialization
scshr · hr portalJun 6, 2025
CVE-2025-48782
39Monitor
Soar Cloud HRD Human Resource Management System - Unrestricted Upload of File with Dangerous Type
CriticalCVSS 9.9No exploitEPSS 1%
- pre-auth RCE
- File upload
scshr · hr portalJun 6, 2025
CVE-2025-5192
37Monitor
Soar Cloud HRD Human Resource Management System - Missing Authentication for Critical Function
CriticalCVSS 9.3No exploitEPSS 1%
- Pre-auth
- Auth bypass
scshr · hr portalJun 6, 2025
CVE-2025-48783
35Monitor
Soar Cloud HRD Human Resource Management System - External Control of File Name or Path
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Path traversal
scshr · hr portalJun 6, 2025
CVE-2024-5995
35Monitor
Soar Cloud HR Portal - Insufficient Session Expiration
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
soar cloud · hr portalJun 14, 2024
CVE-2025-48784
35Monitor
Soar Cloud HRD Human Resource Management System - Missing Authorization
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
scshr · hr portalJun 6, 2025
CVE-2025-48781
34Monitor
Soar Cloud HRD Human Resource Management System - External Control of File Name or Path
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
scshr · hr portalJun 6, 2025
CVE-2023-34357
31Monitor
Soar Cloud Ltd. HR Portal - Weak Password Recovery Mechanism for Forgotten Password
HighCVSS 7.8No exploitEPSS 0%
scshr · hr portalSep 6, 2023