CVE-2021-38823: Icehrm

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an admin account does not invalidate an admin session that is opened in a different browser.

Affected products

• Icehrm Icehrm: version 30.0.0.os only

Published 2021-10-04. Last modified 2026-06-17.