Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
1DescriptionNVD
Sunnet eHRD, a human training and development management system, improperly stores system files. Attackers can use a specific URL and capture confidential information.
AnalysisAI
Sunnet eHRD, a human training and development management system, improperly stores system files. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
Sunnet eHRD, a human training and development management system, improperly stores system files. Attackers can use a specific URL and capture confidential information. Affected products include: Sun Ehrd.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restrictio
Sunnet eHRD has broken access control vulnerability, which allows a remote attacker to access account management page af
Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path trav
Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. Rate
Sunnet eHRD, a human training and development management system, contains vulnerability of Cross-Site Scripting (XSS), a
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today