CVE-2025-1387: Learning Digital Orca HCM - Improper Authentication
Critical (9.8)
Sign up for FREE to recieve instant alerts about this vulnerability!
Description
Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any user.
Classification
CVE ID: CVE-2025-1387
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.8
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
Vendor: Learning Digital
Product: Orca HCM
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.09% (probability of being exploited)
EPSS Percentile: 0.41281 (how common is this exploit)
EPSS Date: 2025-03-12 (when was this score calculated)