CVE-2021-22854
Soar Cloud System Co., Ltd. HR Portal - SQL Injection
- State
- Published
- Severity
- 7.5 High
- Published
- Feb 17, 2021
- Updated
- Sep 16, 2024
- Reserved
- Jan 6, 2021
Description
The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without privilege.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | twcert |
Weaknesses
- CWE-89 SQL Injection
Affected Products
| Product | Versions |
|---|---|
HR PortalSoar Cloud System Co., Ltd. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.