CVE-2025-5192

HIGH

Scshr HR Portal < 7.3.2025.0408 - Missing Authentication

Title source: rule

Description

A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions.

References (1)

Core 1

Core References

Third Party Advisory third-party-advisory

https://zuso.ai/advisory/za-2025-04

Scores

CVSS v3 7.5

EPSS 0.0044

EPSS Percentile 35.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-306

Status published

Products (1)

scshr/hr_portal < 7.3.2025.0408

Published Jun 06, 2025

Tracked Since Feb 18, 2026