Product by Sunnet
Sunnet eHRD CTMS
16 known vulnerabilities in Sunnet eHRD CTMS (Sunnet), 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-24836 | SUNNET CTMS - Path Traversal | 8.8 | |
| Critical | CVE-2025-54944 | SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type | 9.8 | |
| Critical | CVE-2025-54945 | SUNNET Corporate Training Management System - External Control of File Name or Path | 9.8 | |
| Critical | CVE-2025-54943 | SUNNET Corporate Training Management System - Missing Authorization | 9.8 | |
| Critical | CVE-2025-54946 | SUNNET Corporate Training Management System - SQL Injection | 9.8 | |
| Critical | CVE-2025-54942 | SUNNET Corporate Training Management System - Missing Authentication for Critical Function | 9.8 | |
| High | CVE-2026-7490 | Sunnet｜CTMS and CPAS - Arbitrary File Upload | 7.2 | |
| Critical | CVE-2024-10440 | Sunnet eHRD CTMS - SQL Injection | 9.8 | |
| High | CVE-2026-7489 | Sunnet｜CTMS - SQL Injection | 8.8 | |
| Medium | CVE-2025-9570 | Sunnet｜eHRD CTMS - Arbitrary File Reading through Path Traversal | 4.9 | |
| High | CVE-2024-10438 | Sunnet eHRD CTMS - Authentication Bypass | 7.5 | |
| Medium | CVE-2025-3707 | Sunnet eHRD CTMS - SQL Injection | 6.5 | |
| Medium | CVE-2025-9568 | Sunnet｜eHRD CTMS - Reflected Cross-site Scripting | 6.1 | |
| Medium | CVE-2025-9567 | Sunnet｜eHRD CTMS - Reflected Cross-site Scripting | 6.1 | |
| Medium | CVE-2025-9569 | Sunnet｜eHRD CTMS - Reflected Cross-site Scripting | 6.1 | |
| High | CVE-2024-10439 | Sunnet eHRD CTMS - Insecure Direct Object Reference | 5.3 |