SU
Vendor
Sun.net
22
CVEs
0
On KEV
0
New 30D
Products
EC9.8
Ehrd Ctms
Sun.net
16 CVEs0 on KEV0 new
WM9.8
Wmpro
Sun.net
5 CVEs0 on KEV0 new
EC7.2
Ehrd Cpas
Sun.net
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-7490 | EC Ehrd Cpas Sun.net | 7.2 | May 2 | Sunnet｜CTMS and CPAS - Arbitrary File Upload |
| CVE-2026-7489 | EC Ehrd Ctms Sun.net | 8.8 | May 2 | Sunnet｜CTMS - SQL Injection |
| CVE-2025-15226 | WM Wmpro Sun.net | 9.8 | Dec 29 | Sunnet｜WMPro - Arbitrary File Upload |
| CVE-2025-15225 | WM Wmpro Sun.net | 7.5 | Dec 29 | Sunnet｜WMPro - Arbitrary File Read |
| CVE-2025-9570 | EC Ehrd Ctms Sun.net | 4.9 | Sep 1 | Sunnet｜eHRD CTMS - Arbitrary File Reading through Path Traversal |
| CVE-2025-9569 | EC Ehrd Ctms Sun.net | 6.1 | Sep 1 | Sunnet｜eHRD CTMS - Reflected Cross-site Scripting |
| CVE-2025-9568 | EC Ehrd Ctms Sun.net | 6.1 | Sep 1 | Sunnet｜eHRD CTMS - Reflected Cross-site Scripting |
| CVE-2025-9567 | EC Ehrd Ctms Sun.net | 6.1 | Sep 1 | Sunnet｜eHRD CTMS - Reflected Cross-site Scripting |
| CVE-2025-54946 | EC Ehrd Ctms Sun.net | 9.8 | Aug 30 | SUNNET Corporate Training Management System - SQL Injection |
| CVE-2025-54945 | EC Ehrd Ctms Sun.net | 9.8 | Aug 30 | SUNNET Corporate Training Management System - External Control of File Name or Path |
| CVE-2025-54944 | EC Ehrd Ctms Sun.net | 9.8 | Aug 30 | SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type |
| CVE-2025-54943 | EC Ehrd Ctms Sun.net | 9.8 | Aug 30 | SUNNET Corporate Training Management System - Missing Authorization |
| CVE-2025-54942 | EC Ehrd Ctms Sun.net | 9.8 | Aug 30 | SUNNET Corporate Training Management System - Missing Authentication for Critical Function |
| CVE-2025-3707 | EC Ehrd Ctms Sun.net | 6.5 | May 2 | Sunnet eHRD CTMS - SQL Injection |
| CVE-2024-10440 | EC Ehrd Ctms Sun.net | 9.8 | Oct 28 | Sunnet eHRD CTMS - SQL Injection |
| CVE-2024-10439 | EC Ehrd Ctms Sun.net | 7.5 | Oct 28 | Sunnet eHRD CTMS - Insecure Direct Object Reference |
| CVE-2024-10438 | EC Ehrd Ctms Sun.net | 7.5 | Oct 28 | Sunnet eHRD CTMS - Authentication Bypass |
| CVE-2023-35851 | WM Wmpro Sun.net | 7.5 | Sep 18 | SUNNET WMPro portal's FAQ function has insufficient validation for user input |
| CVE-2023-35850 | WM Wmpro Sun.net | 7.2 | Sep 18 | SUNNET WMPro portal's file management function has a vulnerability of insufficient filtering for user input |
| CVE-2023-24836 | EC Ehrd Ctms Sun.net | 8.8 | Apr 27 | SUNNET CTMS has vulnerability of path traversal within its file uploading function |
| CVE-2019-11062 | WM Wmpro Sun.net | 9.8 | Jul 11 | The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via "/teach/course/doajaxfileupload.php" |