CVE-2021-22855: Hr Portal Project Hr Portal

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can send malicious serialized objects to execute arbitrary commands.

Affected products

• Hr Portal Project Hr Portal: version 7.3.2020.1013 only

Published 2021-02-17. Last modified 2026-06-17.