Required CVE Record Information
Description
The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without privilege.
CVSS 1 Total
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.5 | HIGH | 3.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.