Filtered by vendor Sunnet Subscriptions
Filtered by product Ehrd Ctms Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-10440 1 Sunnet 1 Ehrd Ctms 2024-10-28 9.8 Critical
The eHDR CTMS from Sunnet has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL command to read, modify, and delete database contents.
CVE-2024-10438 1 Sunnet 1 Ehrd Ctms 2024-10-28 7.5 High
The eHRD CTMS from Sunnet has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to bypass authentication by satisfying specific conditions in order to access certain functionalities.
CVE-2024-10439 1 Sunnet 1 Ehrd Ctms 2024-10-28 5.3 Medium
The eHRD CTMS from Sunnet has an Insecure Direct Object Reference (IDOR) vulnerability, allowing unauthenticated remote attackers to modify a specific parameter to access arbitrary files uploaded by any user.