← Database

CVE-2025-1388

HIGH CVSS: 8.8 Published: 2025-02-17 Modified: 2026-06-17

Description

Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web shells

Affected Platforms

Learningdigital Orca Hcm

Weakness Type

CWE-434

References