CVE-2021-22854CWE-89

Soar Cloud System Co., Ltd. HR Portal - SQL Injection

High · published February 17, 2021

CVSS v3.1
7.5
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without privilege.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01582 · 75.3th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2021-02-17T13:30Z
EPSS history
Timeline
  • 17 FEB 13:30Z
    Soar Cloud System Co., Ltd. HR Portal - SQL Injection
    cvelistv5