PatchTheCVEhr portal vulnerabilities and fixes
Recent CVEs affecting hr portal, with upgrade or downgrade steps. 6 tracked.
Also searched as: hrportal.
hr portal has 6 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 6. Most recent: 2025-06-06. Highest priority: CVE-2025-48780 (score 51/100).
- CVE-2025-5192 HIGH 7.5 UPGRADE A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human
- CVE-2025-48784 HIGH 7.5 UPGRADE A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2
- CVE-2025-48783 HIGH 7.5 UPGRADE An external control of file name or path vulnerability in the delete file function of Soar Cloud HRD Human Res
- CVE-2025-48782 CRITICAL 9.8 UPGRADE An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD
- CVE-2025-48781 HIGH 7.5 UPGRADE An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human R
- CVE-2025-48780 CRITICAL 9.8 UPGRADE A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resour
FAQ
How do I fix hr portal vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is hr portal being exploited right now?
None of the tracked hr portal CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which hr portal CVE should I patch first?
CVE-2025-48780 currently ranks highest (51/100): A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resour.