Approved changes feed: RSS · Atom

cpe:2.3:a:sun.net:ehdr_ctms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSun.Net (d0dc7899-8489-5e38-a980-d5da8f355e5f)
ProductEhdr Ctms (01dbd3d1-2b95-59b1-9dc2-deb1ba485071)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10440 vulnerable 2026-06-08 06:23:46.554893 Sunnet eHRD CTMS - SQL Injection
CRITICAL (9.8)
The eHDR CTMS from Sunnet has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL command to read, modify, and delete database contents.
Published: 2024-10-28T02:53:00.553Z
Updated: 2024-10-28T12:48:06.154Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10439 vulnerable 2026-06-08 06:23:46.554257 Sunnet eHRD CTMS - Insecure Direct Object Reference
MEDIUM (5.3)
The eHRD CTMS from Sunnet has an Insecure Direct Object Reference (IDOR) vulnerability, allowing unauthenticated remote attackers to modify a specific parameter to access arbitrary files uploaded by any user.
Published: 2024-10-28T02:49:34.913Z
Updated: 2024-10-28T12:50:33.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10438 vulnerable 2026-06-08 06:23:46.552271 Sunnet eHRD CTMS - Authentication Bypass
HIGH (7.5)
The eHRD CTMS from Sunnet has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to bypass authentication by satisfying specific conditions in order to access certain functionalities.
Published: 2024-10-28T02:46:33.258Z
Updated: 2024-10-28T12:52:28.130Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.