Vendor
Sunnet
21 known vulnerabilities in products by Sunnet, 0 of them actively exploited (CISA KEV).
Key figures
21
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-11062 | SUNNET WMPro v5.0 and v5.1 has OS Command Injection | 9.8 | |
| High | CVE-2023-24836 | SUNNET CTMS - Path Traversal | 8.8 | |
| Critical | CVE-2025-54944 | SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type | 9.8 | |
| Critical | CVE-2025-15226 | Sunnet｜WMPro - Arbitrary File Upload | 9.8 | |
| Critical | CVE-2025-54945 | SUNNET Corporate Training Management System - External Control of File Name or Path | 9.8 | |
| Critical | CVE-2025-54943 | SUNNET Corporate Training Management System - Missing Authorization | 9.8 | |
| Critical | CVE-2025-54946 | SUNNET Corporate Training Management System - SQL Injection | 9.8 | |
| High | CVE-2025-15225 | Sunnet｜WMPro - Arbitrary File Read | 7.5 | |
| Critical | CVE-2025-54942 | SUNNET Corporate Training Management System - Missing Authentication for Critical Function | 9.8 | |
| High | CVE-2026-7490 | Sunnet｜CTMS and CPAS - Arbitrary File Upload | 7.2 | |
| Critical | CVE-2024-10440 | Sunnet eHRD CTMS - SQL Injection | 9.8 | |
| High | CVE-2023-35850 | SUNNET WMPro - Command Injection | 7.2 | |
| High | CVE-2023-35851 | SUNNET WMPro - SQL Injection | 7.5 | |
| High | CVE-2026-7489 | Sunnet｜CTMS - SQL Injection | 8.8 | |
| Medium | CVE-2025-9570 | Sunnet｜eHRD CTMS - Arbitrary File Reading through Path Traversal | 4.9 | |
| High | CVE-2024-10438 | Sunnet eHRD CTMS - Authentication Bypass | 7.5 | |
| Medium | CVE-2025-3707 | Sunnet eHRD CTMS - SQL Injection | 6.5 | |
| Medium | CVE-2025-9568 | Sunnet｜eHRD CTMS - Reflected Cross-site Scripting | 6.1 | |
| Medium | CVE-2025-9567 | Sunnet｜eHRD CTMS - Reflected Cross-site Scripting | 6.1 | |
| Medium | CVE-2025-9569 | Sunnet｜eHRD CTMS - Reflected Cross-site Scripting | 6.1 | |
| High | CVE-2024-10439 | Sunnet eHRD CTMS - Insecure Direct Object Reference | 5.3 |
Products
| Sunnet eHRD CTMS | 16 | 0 |
| SUNNET WMPro | 5 | 0 |