CVE-2025-5192

9.3 criticalEPSS 0.5%

Critical (9.3) in scshr hr portal. EPSS 0.5% chance of exploitation in the next 30 days.

A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions.

Severity

CVSS 4.0

9.3 critical

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2025-06-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

scshr:hr_portal

References

https://zuso.ai/advisory/za-2025-04

Check your stack JSON