CVE-2025-9568

MediumCVSS 6.1

Published: 01/09/2025(UTC)Updated: 30/09/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

16th percentile - higher than 16% of all known CVEs

Summary

The eHRD system developed by Sunnet has a Reflected Cross-site Scripting (XSS) vulnerability. Unauthenticated remote attackers can execute arbitrary JavaScript code in the user's browser through phishing attacks.

Risk Assessment

An attacker can hijack a user's session, steal credentials, or perform actions in the victim's context, potentially compromising the HR system's security.

Recommendation

Apply patches from Sunnet for the eHRD system. Implement input filtering and anti-phishing training for users.

Other vulnerabilities in eHRD

CVE-2025-9567Medium
The eHRD system developed by Sunnet has a Reflected Cross-site Scripting (XSS) vulnerability. Unauthenticated remote attackers can execute arbitrary JavaScript code in the user's browser through phishing attacks.

Original NVD description (English source)

The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS