汇总 scshr 相关全部产品的 CVE 与安全漏洞情报，包括 CVSS、EPSS、公开时间与漏洞情报数据。
已披露问题常与 文件包含 相关，可能在 软件部署与生产负载 场景中带来 文件覆盖与未授权访问 等暴露风险。
相关漏洞数据主要来源于公开漏洞披露与安全公告，可用于评估历史漏洞暴露面与修复优先级。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2025-5192 | A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions. | [email protected] | 9.3 | 0.44% | 2025-06-06 | 2026-06-17 |
| CVE-2025-48784 | A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to modify system settings without prior authorization. | [email protected] | 8.8 | 0.30% | 2025-06-06 | 2026-06-17 |
| CVE-2025-48783 | An external control of file name or path vulnerability in the delete file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to delete partial files by specifying arbitrary file paths. | [email protected] | 8.8 | 0.27% | 2025-06-06 | 2026-06-17 |
| CVE-2025-48782 | An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file. | [email protected] | 9.9 | 0.44% | 2025-06-06 | 2026-06-17 |
| CVE-2025-48781 | An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to obtain partial files by specifying arbitrary file paths. | [email protected] | 8.7 | 0.38% | 2025-06-06 | 2026-06-17 |
| CVE-2025-48780 | A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a crafted serialized object. | [email protected] | 9.9 | 0.46% | 2025-06-06 | 2026-06-17 |
| CVE-2023-34357 | Soar Cloud Ltd. HR Portal has a weak Password Recovery Mechanism for Forgotten Password. The reset password link sent out through e-mail, and the link will remain valid after the password has been reset and after the expected expiration date. An attacker with access to the browser history or has the line can thus use the URL again to change the password in order to take over the account. | [email protected] | 7.8 | 0.17% | 2023-09-06 | 2026-06-17 |