CVE-2025-54943

critical · 9.3

A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.

9.3

CVSS

0.5%

EPSS (exploit prob.)

42nd

EPSS percentile

2025-08-30

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-862

Affected products

Vendor	Product	Affected versions
sun.net	ehrd_ctms	< 10.11

Check a specific version with /api/v1/cve/match.

References

https://zuso.ai/advisory/za-2025-11

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-54943