VendorsSUNNETehrd_ctmsall versions
Vulnerabilities

SUNNET Sun.net eHRD CTMS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

16CVEs
CVE-2025-54945
SUNNET Corporate Training Management System - External Control of File Name or Path
Published 2025-08-30 · Modified
10.0EPSS 0.005
CVE-2025-54944
SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type
Published 2025-08-30 · Modified
9.8EPSS 0.007
CVE-2024-10440
Sunnet eHRD CTMS - SQL Injection
Published 2024-10-28 · Analyzed
9.8EPSS 0.005
CVE-2025-54943
SUNNET Corporate Training Management System - Missing Authorization
Published 2025-08-30 · Modified
9.8EPSS 0.005
CVE-2025-54946
SUNNET Corporate Training Management System - SQL Injection
Published 2025-08-30 · Modified
9.8EPSS 0.005
CVE-2025-54942
SUNNET Corporate Training Management System - Missing Authentication for Critical Function
Published 2025-08-30 · Modified
9.8EPSS 0.005
CVE-2023-24836
SUNNET CTMS - Path Traversal
Published 2023-04-27 · Modified
8.8EPSS 0.012
CVE-2026-7489
Sunnet|CTMS - SQL Injection
Published 2026-05-02 · Analyzed
8.8EPSS 0.006
CVE-2026-7490
Sunnet|CTMS and CPAS - Arbitrary File Upload
Published 2026-05-02 · Analyzed
8.6EPSS 0.008
CVE-2024-10438
Sunnet eHRD CTMS - Authentication Bypass
Published 2024-10-28 · Analyzed
7.5EPSS 0.005
CVE-2024-10439
Sunnet eHRD CTMS - Insecure Direct Object Reference
Published 2024-10-28 · Analyzed
7.5EPSS 0.004
CVE-2025-9570
Sunnet|eHRD CTMS - Arbitrary File Reading through Path Traversal
Published 2025-09-01 · Analyzed
6.9EPSS 0.005
CVE-2025-3707
Sunnet eHRD CTMS - SQL Injection
Published 2025-05-02 · Analyzed
6.5EPSS 0.004
CVE-2025-9567
Sunnet|eHRD CTMS - Reflected Cross-site Scripting
Published 2025-09-01 · Analyzed
6.1EPSS 0.003
CVE-2025-9568
Sunnet|eHRD CTMS - Reflected Cross-site Scripting
Published 2025-09-01 · Analyzed
6.1EPSS 0.003
CVE-2025-9569
Sunnet|eHRD CTMS - Reflected Cross-site Scripting
Published 2025-09-01 · Analyzed
6.1EPSS 0.003