CVE-2025-1387 — AI Deep Analysis Summary

Q: Who is affected? (Versions/Components)

🏢 **Affected**: **Learning Digital Orca HCM**. 🏭 **Vendor**: Learning Digital (中国一宇数位). 📅 **Published**: Feb 17, 2025. Specific version numbers are not listed in the data, but the product line is at risk.

Q: Is there a public Exp? (PoC/Wild Exploitation)

📦 **Public Exploit**: **No**. 🚫 **PoCs**: The `pocs` array is empty in the data. 📢 **Advisories**: References exist from **TW-CERT** (Taiwan CERT), indicating awareness but no confirmed public code exploit yet.

Q: Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **CRITICAL**. 📊 **CVSS**: 9.8 (High). ⚡ **Priority**: **P0**. 🚨 **Reason**: Zero-privilege, network-accessible, full system compromise. Treat as an active emergency until patched.

Updated May 06, 2026 CVSS 9.8 · Critical

This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis →

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: Learning Digital Orca HCM has a critical **Authentication Bypass** flaw. <br>⚡ **Consequences**: Attackers can log in as **ANY user**.…

Read full answer (login)

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-1390** (Improper Authentication). <br>❌ **Flaw**: The system fails to properly verify user credentials.…

Read full answer (login)

Q3Who is affected? (Versions/Components)

🏢 **Affected**: **Learning Digital Orca HCM**. <br>🏭 **Vendor**: Learning Digital (中国一宇数位). <br>📅 **Published**: Feb 17, 2025. Specific version numbers are not listed in the data, but the product line is at risk.

Q4What can hackers do? (Privileges/Data)

💀 **Hackers Can**: <br>1. **Impersonate** any user (Admin, HR, Employee). <br>2. **Steal** sensitive HR data (Confidentiality). <br>3. **Modify** records (Integrity). <br>4. **Disrupt** operations (Availability).…

Read full answer (login)

Q5Is exploitation threshold high? (Auth/Config)

📉 **Threshold**: **LOW**. <br>🌐 **Network**: Attack Vector is Network (AV:N). <br>🔓 **Auth**: Privileges Required are None (PR:N). <br>👀 **UI**: User Interaction is None (UI:N).…

Read full answer (login)

Q6Is there a public Exp? (PoC/Wild Exploitation)

📦 **Public Exploit**: **No**. <br>🚫 **PoCs**: The `pocs` array is empty in the data. <br>📢 **Advisories**: References exist from **TW-CERT** (Taiwan CERT), indicating awareness but no confirmed public code exploit yet.

Q7How to self-check? (Features/Scanning)

🔍 **Self-Check**: <br>1. Check if you run **Learning Digital Orca HCM**. <br>2. Monitor for **unusual login sessions** from unknown IPs. <br>3. Scan for the specific product header/version. <br>4.…

Read full answer (login)

Q8Is it fixed officially? (Patch/Mitigation)

🩹 **Official Fix**: **Unknown/Not Specified**. <br>⚠️ The provided data does not contain a patch link or version number where it is fixed.…

Read full answer (login)

Q9What if no patch? (Workaround)

🛑 **Workaround (No Patch)**: <br>1. **Isolate**: Block network access to the Orca HCM instance immediately. <br>2. **WAF**: Use Web Application Firewall to block suspicious authentication requests. <br>3.…

Read full answer (login)

Q10Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **CRITICAL**. <br>📊 **CVSS**: 9.8 (High). <br>⚡ **Priority**: **P0**. <br>🚨 **Reason**: Zero-privilege, network-accessible, full system compromise. Treat as an active emergency until patched.

Continue exploring

Vulnerability detail Full AI analysis (login) Learning Digital CWE-1390