CVE-2020-10509: Sunnet eHRD - Cross-Site Scripting

Published Mar 27, 2020

Updated

Sunnet eHRD, a human training and development management system, contains vulnerability of Cross-Site Scripting (XSS), attackers can inject arbitrary command into the system and launch XSS attack.

Affected Software

2 affected components

Sun eHRD=8.0

Sun eHRD=9.0

Remediation

Information

Update to version 10 or latest, or contact Sunnet for fixing patch.

Event History

Mar 27, 2020

CVE Published

via MITRE·07:35 AM

Data Sourced

via MITRE·07:35 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-10509?

CVE-2020-10509 is classified as a moderate severity vulnerability due to its potential for Cross-Site Scripting attacks.

How do I fix CVE-2020-10509?

To fix CVE-2020-10509, ensure that you are using the latest patched version of Sunnet eHRD, which includes security improvements to prevent XSS attacks.

What systems are affected by CVE-2020-10509?

CVE-2020-10509 affects Sunnet eHRD versions 8.0 and 9.0.

What kind of attack is associated with CVE-2020-10509?

CVE-2020-10509 is associated with Cross-Site Scripting (XSS) attacks that allow attackers to inject arbitrary commands.

How can attackers exploit CVE-2020-10509?

Attackers can exploit CVE-2020-10509 by injecting malicious scripts via user inputs that the application fails to properly sanitize.