Security Advisory

CVE-2025-1389

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-02-17 04:15:08
Last updated 2025-02-18 15:32:37
Assigner twcert
State PUBLISHED

Description

Orca HCM from Learning Digital has a SQL Injection vulnerability, allowing attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents.