Skip to content
OpenAdvisories

Vendor

Soar Cloud

2 known vulnerabilities.

Products

HR Portal 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-5995

    Soar Cloud HR Portal - Insufficient Session Expiration

    The notification emails sent by Soar Cloud HR Portal contain a link with a embedded session. The expiration of the session is not properly configured, remaining valid for more than 7 days and can be reused.

    Soar Cloud HR Portal
  • High 7.8
    CVE-2023-34357

    Soar Cloud Ltd. HR Portal - Weak Password Recovery Mechanism for Forgotten Password

    Soar Cloud Ltd. HR Portal has a weak Password Recovery Mechanism for Forgotten Password. The reset password link sent out through e-mail, and the link will remain valid after the password has been reset and after the expected expiration date. An attacker with…

    Soar Cloud HR Portal