PT-2025-24066 · Unknown · Soar Cloud Hrd Human Resource Management System

Yen Chun Shen · Published 2025-06-06 · Updated 2026-02-04 · CVE-2025-48784

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Soar Cloud HRD Human Resource Management System versions prior to 7.3.2025.0408

Description A missing authorization issue allows remote attackers to modify system settings without prior authorization.

Recommendations For versions prior to 7.3.2025.0408, update to a version that includes the necessary authorization checks to prevent unauthorized modification of system settings.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-48784

Affected Products

Soar Cloud Hrd Human Resource Management System

References · 8

• https://osv.dev/vulnerability/CVE-2025-48784 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-48784 · Security Note
• https://twitter.com/CVEnew/status/1930925640422928673 · Twitter Post
• https://t.me/latest_high_impact_cve/2565 · Telegram Post
• https://zuso.ai/advisory/za-2025-09 · Note
• https://t.me/cveNotify/150848 · Telegram Post
• https://t.me/cvetracker/25605 · Telegram Post
• https://t.me/cvenotify/124890 · Telegram Post