CVE-2021-22855
CRITICALSoar Cloud System - Code Injection
Title source: llmDescription
The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can send malicious serialized objects to execute arbitrary commands.
Scores
CVSS v3
9.8
EPSS
0.0078
EPSS Percentile
73.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-502
Status
published
Affected Products (1)
hr_portal_project/hr_portal
Timeline
Published
Feb 17, 2021
Tracked Since
Feb 18, 2026