SSUNNET

Products

Exploited and recent CVEs

• CVE-2026-7490 High 7.2 Sunnet｜CTMS and CPAS - Arbitrary File Upload 0.5%
• CVE-2026-7490 High 7.2 Sunnet｜CTMS and CPAS - Arbitrary File Upload 0.5%
• CVE-2026-7489 High 8.8 Sunnet｜CTMS - SQL Injection 0.3%
• CVE-2025-15226 Critical 9.8 Sunnet｜WMPro - Arbitrary File Upload 0.6%
• CVE-2025-15225 High 7.5 Sunnet｜WMPro - Arbitrary File Read 0.5%
• CVE-2025-9570 Medium 4.9 Sunnet｜eHRD CTMS - Arbitrary File Reading through Path Traversal 0.5%
• CVE-2025-9569 Medium 6.1 Sunnet｜eHRD CTMS - Reflected Cross-site Scripting 0.3%
• CVE-2025-9568 Medium 6.1 Sunnet｜eHRD CTMS - Reflected Cross-site Scripting 0.3%
• CVE-2025-9567 Medium 6.1 Sunnet｜eHRD CTMS - Reflected Cross-site Scripting 0.3%
• CVE-2025-3707 Medium 6.5 Sunnet eHRD CTMS - SQL Injection 0.4%
• CVE-2024-10440 Critical 9.8 Sunnet eHRD CTMS - SQL Injection 0.5%
• CVE-2024-10439 Medium 5.3 Sunnet eHRD CTMS - Insecure Direct Object Reference 0.4%
• CVE-2024-10438 High 7.5 Sunnet eHRD CTMS - Authentication Bypass 0.5%
• CVE-2023-35851 High 7.5 SUNNET WMPro - SQL Injection 0.8%
• CVE-2023-35850 High 7.2 SUNNET WMPro - Command Injection 0.9%
• CVE-2023-24836 High 8.8 SUNNET CTMS - Path Traversal 1.2%
• CVE-2021-43360 High 8.8 Sunnet eHRD - Insecure Deserialization 2.4%
• CVE-2021-43359 High 8.8 Sunnet eHRD - Broken Access Control 2.5%
• CVE-2021-43358 High 7.5 Sunnet eHRD - Path Traversal 2.4%
• CVE-2020-10510 High 8.1 Sunnet eHRD - Broken Access Control 1.1%
• CVE-2020-10509 Medium 6.1 Sunnet eHRD - Cross-Site Scripting 0.9%
• CVE-2020-10508 High 7.5 Sunnet eHRD - Sensitive Data Exposure 1.5%