PatchTheCVElearningdigital vulnerabilities
Recent CVEs affecting learningdigital products. 5 tracked.
learningdigital has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-02-17. Highest priority: CVE-2024-8584 (score 52/100).
- CVE-2025-1389 HIGH 8.8 UPGRADE Orca HCM from Learning Digital has a SQL Injection vulnerability, allowing attackers with regular privileges t
- CVE-2025-1388 HIGH 8.8 UPGRADE Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regu
- CVE-2025-1387 CRITICAL 9.8 UPGRADE Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote a
- CVE-2024-8585 MEDIUM 6.5 UPGRADE Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionali
- CVE-2024-8584 CRITICAL 9.8 UPGRADE Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote at
FAQ
How do I fix learningdigital vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is learningdigital being exploited right now?
None of the tracked learningdigital CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which learningdigital CVE should I patch first?
CVE-2024-8584 currently ranks highest (52/100): Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote at.