Feed/CVE-2025-1388
CVE-2025-1388HIGHCVSS 8.8

CVE-2025-1388

Published Feb 16, 2025·Updated Jun 17, 2026

NVD Description

Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web shells

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free