High severity8.8NVD Advisory· Published Feb 17, 2025· Updated Jun 17, 2026
CVE-2025-1388
CVE-2025-1388
Description
Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web shells
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- www.twcert.org.tw/en/cp-139-8430-32513-2.htmlnvdThird Party Advisory
- www.twcert.org.tw/tw/cp-132-8429-07d7e-1.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.