CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.
CVE
CVE-2021-35965
Severity
CRITICAL
CVSS
9.8
EPSS
2.38%
Original NVD Description
The Orca HCM digital learning platform uses a weak factory default administrator password, which is hard-coded in the source code of the webpage in plain text, thus remote attackers can obtain administrator’s privilege without logging in.
Related CVEs
Other vulnerabilities affecting the same vendor(s)