CVE-2025-54943

Critical CVSS: 9.3

A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.

Vendor

Sun.net

Product

Ehrd Ctms

CWE

CWE-862

Yayın Tarihi

2025-08-30 04:15:52

Güncelleme

2026-01-30 04:15:48

Source Identifier

ART@zuso.ai

KEV Date Added

Kategoriler

CWE-862 Ehrd Ctms CRITICAL Sun.net 2025

Referanslar

https://zuso.ai/advisory/za-2025-11

Benzer Kayıtlar

High

CVE-2025-15225

WMPro developed by Sunnet has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit…

Critical

CVE-2025-15226

WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload…

Medium

CVE-2025-9570

The eHRD CTMS developed by Sunnet has an Arbitrary File Reading vulnerability, allowing remote attackers with administra…

Medium

CVE-2025-9567

The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attacke…

Medium

CVE-2025-9568

The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attacke…

Medium

CVE-2025-9569

The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attacke…