| Package | Affected versions | Patched versions |
|---|---|---|
| orca hcm | ≤ 10.0 |
The Orca HCM digital learning platform uses a weak factory default administrator password, which is hard-coded in the source code of the webpage in plain text, thus remote attackers can obtain administrator’s privilege without logging in.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free