CVE-2025-5192

critical · 9.3

A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions.

9.3

CVSS

0.5%

EPSS (exploit prob.)

43rd

EPSS percentile

2025-06-06

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-306

Affected products

Vendor	Product	Affected versions
scshr	hr_portal	<= 7.3.2025.0408

Check a specific version with /api/v1/cve/match.

References

https://zuso.ai/advisory/za-2025-04

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-5192