sun.net records
21 published records for vendor sun.net.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 8
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-23 Relative Path Traversal2
- CWE-862 Missing Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAll records
21 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
41Plan | CVE-2019-11062No exploit | SUNNET WMPro v5.0 and v5.1 has OS Command Injectionsun.net · wmpro · CWE-78 | Critical9.8 | — | 5.7% | Jul 11, 2019 |
40Plan | CVE-2025-54945No exploit | SUNNET Corporate Training Management System - External Control of File Name or Pathsun.net · ehrd ctms · CWE-73 | Critical10.0 | — | 0.5% | Aug 30, 2025 |
39Monitor | CVE-2024-10440No exploit | Sunnet eHRD CTMS - SQL Injectionsun.net · ehrd ctms · CWE-89 | Critical9.8 | — | 0.5% | Oct 27, 2024 |
37Monitor | CVE-2025-15226No exploit | Sunnet｜WMPro - Arbitrary File Uploadsun.net · wmpro · CWE-434 | Critical9.3 | — | 0.6% | Dec 29, 2025 |
37Monitor | CVE-2025-54943No exploit | SUNNET Corporate Training Management System - Missing Authorizationsun.net · ehrd ctms · CWE-862 | Critical9.3 | — | 0.5% | Aug 30, 2025 |
37Monitor | CVE-2025-54946No exploit | SUNNET Corporate Training Management System - SQL Injectionsun.net · ehrd ctms · CWE-89 | Critical9.3 | — | 0.5% | Aug 30, 2025 |
37Monitor | CVE-2025-54942No exploit | SUNNET Corporate Training Management System - Missing Authentication for Critical Functionsun.net · ehrd ctms · CWE-306 | Critical9.3 | — | 0.5% | Aug 30, 2025 |
35Monitor | CVE-2023-24836No exploit | SUNNET CTMS - Path Traversalsun.net · ehrd ctms · CWE-22 | High8.8 | — | 1.2% | Apr 26, 2023 |
34Monitor | CVE-2026-7490No exploit | Sunnet｜CTMS and CPAS - Arbitrary File Uploadsun.net · ehrd cpas · CWE-434 | High8.6 | — | 0.8% | May 2, 2026 |
34Monitor | CVE-2026-7489No exploit | Sunnet｜CTMS - SQL Injectionsun.net · ehrd ctms · CWE-89 | High8.7 | — | 0.6% | May 2, 2026 |
34Monitor | CVE-2025-15225No exploit | Sunnet｜WMPro - Arbitrary File Readsun.net · wmpro · CWE-23 | High8.7 | — | 0.5% | Dec 29, 2025 |
30Monitor | CVE-2023-35851No exploit | SUNNET WMPro - SQL Injectionsun.net · wmpro · CWE-89 | High7.5 | — | 0.8% | Sep 17, 2023 |
30Monitor | CVE-2024-10438No exploit | Sunnet eHRD CTMS - Authentication Bypasssun.net · ehrd ctms · CWE-288 | High7.5 | — | 0.5% | Oct 27, 2024 |
30Monitor | CVE-2024-10439No exploit | Sunnet eHRD CTMS - Insecure Direct Object Referencesun.net · ehrd ctms · CWE-639 | High7.5 | — | 0.4% | Oct 27, 2024 |
28Monitor | CVE-2023-35850No exploit | SUNNET WMPro - Command Injectionsun.net · wmpro · CWE-78 | High7.2 | — | 0.9% | Sep 17, 2023 |
27Monitor | CVE-2025-54944No exploit | SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Typesun.net · ehrd ctms · CWE-434 | Medium6.9 | — | 0.7% | Aug 30, 2025 |
27Monitor | CVE-2025-9570No exploit | Sunnet｜eHRD CTMS - Arbitrary File Reading through Path Traversalsun.net · ehrd ctms · CWE-23 | Medium6.9 | — | 0.5% | Sep 1, 2025 |
26Monitor | CVE-2025-3707No exploit | Sunnet eHRD CTMS - SQL Injectionsun.net · ehrd ctms · CWE-89 | Medium6.5 | — | 0.4% | May 2, 2025 |
20Monitor | CVE-2025-9569No exploit | Sunnet｜eHRD CTMS - Reflected Cross-site Scriptingsun.net · ehrd ctms · CWE-79 | Medium5.1 | — | 0.3% | Aug 31, 2025 |
20Monitor | CVE-2025-9568No exploit | Sunnet｜eHRD CTMS - Reflected Cross-site Scriptingsun.net · ehrd ctms · CWE-79 | Medium5.1 | — | 0.3% | Aug 31, 2025 |
20Monitor | CVE-2025-9567No exploit | Sunnet｜eHRD CTMS - Reflected Cross-site Scriptingsun.net · ehrd ctms · CWE-79 | Medium5.1 | — | 0.3% | Aug 31, 2025 |
- CVE-2019-1106241Plan
SUNNET WMPro v5.0 and v5.1 has OS Command Injection
CriticalCVSS 9.8No exploitEPSS 6%sun.net · wmproJul 11, 2019
- CVE-2025-5494540Plan
SUNNET Corporate Training Management System - External Control of File Name or Path
CriticalCVSS 10.0No exploitEPSS 1%sun.net · ehrd ctmsAug 30, 2025
- CVE-2024-1044039Monitor
Sunnet eHRD CTMS - SQL Injection
CriticalCVSS 9.8No exploitEPSS 1%sun.net · ehrd ctmsOct 27, 2024
- CVE-2025-1522637Monitor
Sunnet｜WMPro - Arbitrary File Upload
CriticalCVSS 9.3No exploitEPSS 1%sun.net · wmproDec 29, 2025
- CVE-2025-5494337Monitor
SUNNET Corporate Training Management System - Missing Authorization
CriticalCVSS 9.3No exploitEPSS 0%sun.net · ehrd ctmsAug 30, 2025
- CVE-2025-5494637Monitor
SUNNET Corporate Training Management System - SQL Injection
CriticalCVSS 9.3No exploitEPSS 0%sun.net · ehrd ctmsAug 30, 2025
- CVE-2025-5494237Monitor
SUNNET Corporate Training Management System - Missing Authentication for Critical Function
CriticalCVSS 9.3No exploitEPSS 0%sun.net · ehrd ctmsAug 30, 2025
- CVE-2023-2483635Monitor
SUNNET CTMS - Path Traversal
HighCVSS 8.8No exploitEPSS 1%sun.net · ehrd ctmsApr 26, 2023
- CVE-2026-749034Monitor
Sunnet｜CTMS and CPAS - Arbitrary File Upload
HighCVSS 8.6No exploitEPSS 1%sun.net · ehrd cpasMay 2, 2026
- CVE-2026-748934Monitor
Sunnet｜CTMS - SQL Injection
HighCVSS 8.7No exploitEPSS 1%sun.net · ehrd ctmsMay 2, 2026
- CVE-2025-1522534Monitor
Sunnet｜WMPro - Arbitrary File Read
HighCVSS 8.7No exploitEPSS 1%sun.net · wmproDec 29, 2025
- CVE-2023-3585130Monitor
SUNNET WMPro - SQL Injection
HighCVSS 7.5No exploitEPSS 1%sun.net · wmproSep 17, 2023
- CVE-2024-1043830Monitor
Sunnet eHRD CTMS - Authentication Bypass
HighCVSS 7.5No exploitEPSS 1%sun.net · ehrd ctmsOct 27, 2024
- CVE-2024-1043930Monitor
Sunnet eHRD CTMS - Insecure Direct Object Reference
HighCVSS 7.5No exploitEPSS 0%sun.net · ehrd ctmsOct 27, 2024
- CVE-2023-3585028Monitor
SUNNET WMPro - Command Injection
HighCVSS 7.2No exploitEPSS 1%sun.net · wmproSep 17, 2023
- CVE-2025-5494427Monitor
SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type
MediumCVSS 6.9No exploitEPSS 1%sun.net · ehrd ctmsAug 30, 2025
- CVE-2025-957027Monitor
Sunnet｜eHRD CTMS - Arbitrary File Reading through Path Traversal
MediumCVSS 6.9No exploitEPSS 1%sun.net · ehrd ctmsSep 1, 2025
- CVE-2025-370726Monitor
Sunnet eHRD CTMS - SQL Injection
MediumCVSS 6.5No exploitEPSS 0%sun.net · ehrd ctmsMay 2, 2025
- CVE-2025-956920Monitor
Sunnet｜eHRD CTMS - Reflected Cross-site Scripting
MediumCVSS 5.1No exploitEPSS 0%sun.net · ehrd ctmsAug 31, 2025
- CVE-2025-956820Monitor
Sunnet｜eHRD CTMS - Reflected Cross-site Scripting
MediumCVSS 5.1No exploitEPSS 0%sun.net · ehrd ctmsAug 31, 2025
- CVE-2025-956720Monitor
Sunnet｜eHRD CTMS - Reflected Cross-site Scripting
MediumCVSS 5.1No exploitEPSS 0%sun.net · ehrd ctmsAug 31, 2025