CVE-2025-54946

概要

参考情報

• zuso.ai/advisory/za-2025-14

ehrd ctms のその他の脆弱性

• CVE-2025-54945緊急 9.8An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers t…
• CVE-2025-54944緊急 9.8An unrestricted upload of file with dangerous type vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote a…
• CVE-2025-54943緊急 9.8A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unautho…
• CVE-2025-54942緊急 9.8A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attac…
• CVE-2025-3707中 6.5The eHDR CTMS from Sunnet has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL comma…