Approved changes feed: RSS · Atom
cpe:2.3:a:sunnet:ehrd_ctms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sunnet (427cdd9a-35d4-53d3-a7e8-bb1c2354a8d1) |
|---|---|
| Product | Ehrd Ctms (fd8cd892-9ea5-5d69-bd9d-9d20db9dd9ff) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9570 |
vulnerable | 2026-06-08 07:45:22.704114 |
Sunnet｜eHRD CTMS - Arbitrary File Reading through Path Traversal
MEDIUM (4.9)
The eHRD CTMS developed by Sunnet has an Arbitrary File Reading vulnerability, allowing remote attackers with administrator privileges to exploit Relative Path Traversal to download arbitrary system files.
Published: 2025-09-01T02:46:39.988Z
Updated: 2025-09-02T19:27:11.723Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9569 |
vulnerable | 2026-06-08 07:45:22.703592 |
Sunnet｜eHRD CTMS - Reflected Cross-site Scripting
MEDIUM (6.1)
The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.
Published: 2025-09-01T02:42:49.437Z
Updated: 2025-09-02T19:26:40.833Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9568 |
vulnerable | 2026-06-08 07:45:22.703197 |
Sunnet｜eHRD CTMS - Reflected Cross-site Scripting
MEDIUM (6.1)
The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.
Published: 2025-09-01T02:40:33.827Z
Updated: 2025-09-02T14:10:41.707Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9567 |
vulnerable | 2026-06-08 07:45:22.701979 |
Sunnet｜eHRD CTMS - Reflected Cross-site Scripting
MEDIUM (6.1)
The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.
Published: 2025-09-01T02:32:27.215Z
Updated: 2025-09-02T20:44:59.666Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3707 |
vulnerable | 2026-06-08 07:23:09.705538 |
Sunnet eHRD CTMS - SQL Injection
MEDIUM (6.5)
The eHDR CTMS from Sunnet has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL command to read database contents.
Published: 2025-05-02T02:50:33.346Z
Updated: 2025-05-02T16:28:39.998Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10440 |
vulnerable | 2026-06-08 06:23:46.554741 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10439 |
vulnerable | 2026-06-08 06:23:46.554124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10438 |
vulnerable | 2026-06-08 06:23:46.551120 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.