PatchTheCVEorca hcm vulnerabilities and fixes
Recent CVEs affecting orca hcm, with upgrade or downgrade steps. 5 tracked.
Also searched as: orcahcm.
orca hcm has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-02-17. Highest priority: CVE-2024-8584 (score 52/100).
- CVE-2025-1389 HIGH 8.8 UPGRADE Orca HCM from Learning Digital has a SQL Injection vulnerability, allowing attackers with regular privileges t
- CVE-2025-1388 HIGH 8.8 UPGRADE Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regu
- CVE-2025-1387 CRITICAL 9.8 UPGRADE Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote a
- CVE-2024-8585 MEDIUM 6.5 UPGRADE Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionali
- CVE-2024-8584 CRITICAL 9.8 UPGRADE Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote at
FAQ
How do I fix orca hcm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is orca hcm being exploited right now?
None of the tracked orca hcm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which orca hcm CVE should I patch first?
CVE-2024-8584 currently ranks highest (52/100): Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote at.