What’s Vulnerable › Products

Sunnet eHRD CTMS vulnerabilities

16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your Sunnet eHRD CTMS version is affected

Latest Sunnet eHRD CTMS vulnerabilities

• CVE-2026-7490 — Sunnet｜CTMS and CPAS - Arbitrary File Upload (CVSS 7.2)
• CVE-2026-7489 — Sunnet｜CTMS - SQL Injection (CVSS 8.8)
• CVE-2025-9570 — Sunnet｜eHRD CTMS - Arbitrary File Reading through Path Traversal (CVSS 4.9)
• CVE-2025-9569 — Sunnet｜eHRD CTMS - Reflected Cross-site Scripting (CVSS 6.1)
• CVE-2025-9568 — Sunnet｜eHRD CTMS - Reflected Cross-site Scripting (CVSS 6.1)
• CVE-2025-9567 — Sunnet｜eHRD CTMS - Reflected Cross-site Scripting (CVSS 6.1)
• CVE-2025-54946 — SUNNET Corporate Training Management System - SQL Injection (CVSS 9.8)
• CVE-2025-54945 — SUNNET Corporate Training Management System - External Control of File Name or Path (CVSS 9.8)
• CVE-2025-54944 — SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type (CVSS 9.8)
• CVE-2025-54943 — SUNNET Corporate Training Management System - Missing Authorization (CVSS 9.8)
• CVE-2025-54942 — SUNNET Corporate Training Management System - Missing Authentication for Critical Function (CVSS 9.8)
• CVE-2025-3707 — Sunnet eHRD CTMS - SQL Injection (CVSS 6.5)
• CVE-2024-10440 — Sunnet eHRD CTMS - SQL Injection (CVSS 9.8)
• CVE-2024-10439 — Sunnet eHRD CTMS - Insecure Direct Object Reference (CVSS 7.5)
• CVE-2024-10438 — Sunnet eHRD CTMS - Authentication Bypass (CVSS 7.5)
• CVE-2023-24836 — SUNNET CTMS - Path Traversal (CVSS 8.8)