Login Request a demo
EC
Product
Ehrd Ctms
by Sun.net · last CVE May 2, 2026
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 6High 5Medium 5Low 0
Severity
All severities16Critical6High5Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ehrd Ctms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-54946
9.8
0%
Aug 30
SUNNET Corporate Training Management System - SQL Injection
Affected: before 10.11
CVE-2025-54945
9.8
1%
Aug 30
SUNNET Corporate Training Management System - External Control of File Name or Path
Affected: before 10.11
CVE-2025-54944
9.8
1%
Aug 30
SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type
Affected: before 10.11
CVE-2025-54943
9.8
0%
Aug 30
SUNNET Corporate Training Management System - Missing Authorization
Affected: before 10.11
CVE-2025-54942
9.8
0%
Aug 30
SUNNET Corporate Training Management System - Missing Authentication for Critical Function
Affected: before 10.11
CVE-2024-10440
9.8
1%
Oct 28
The eHDR CTMS from Sunnet has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL command to read, modify, and delete database…
Affected: before 10.0
CVE-2026-7489
8.8
0%
May 2
Sunnet｜CTMS - SQL Injection
Affected: All versions, or not specified
CVE-2023-24836
8.8
1%
Apr 27
SUNNET CTMS has vulnerability of path traversal within its file uploading function
Affected: 7.0_1227
CVE-2024-10439
7.5
0%
Oct 28
The eHRD CTMS from Sunnet has an Insecure Direct Object Reference (IDOR) vulnerability, allowing unauthenticated remote attackers to modify a specific parameter to access…
Affected: before 10.8
CVE-2024-10438
7.5
1%
Oct 28
The eHRD CTMS from Sunnet has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to bypass authentication by satisfying specific conditions in order…
Affected: before 10.14
CVE-2026-7490
7.2
0%
May 2
Sunnet｜CTMS and CPAS - Arbitrary File Upload
Affected: All versions, or not specified
CVE-2025-3707
6.5
0%
May 2
Sunnet eHRD CTMS - SQL Injection
Affected: through 10.13
CVE-2025-9569
6.1
0%
Sep 1
Sunnet｜eHRD CTMS - Reflected Cross-site Scripting
Affected: All versions, or not specified
CVE-2025-9568
6.1
0%
Sep 1
Sunnet｜eHRD CTMS - Reflected Cross-site Scripting
Affected: All versions, or not specified
CVE-2025-9567
6.1
0%
Sep 1
Sunnet｜eHRD CTMS - Reflected Cross-site Scripting
Affected: All versions, or not specified
CVE-2025-9570
4.9
1%
Sep 1
Sunnet｜eHRD CTMS - Arbitrary File Reading through Path Traversal
Affected: All versions, or not specified
Showing 16