https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-43360.htmlhttps://patchthecve.com/cve/CVE-2021-43360.htmlWed, 17 Jun 2026 04:10:53 +0000HIGH 8.8: Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authenticated remote attacker with database access privilege, to execute arbitrary code and control the system or interrupt services.https://patchthecve.com/cve/CVE-2021-43359.htmlhttps://patchthecve.com/cve/CVE-2021-43359.htmlWed, 17 Jun 2026 04:10:53 +0000HIGH 8.8: Sunnet eHRD has broken access control vulnerability, which allows a remote attacker to access account management page after being authenticated as a general user, then perform privilege escalation to execute arbitrary code and control the system or interrupt services.https://patchthecve.com/cve/CVE-2021-43358.htmlhttps://patchthecve.com/cve/CVE-2021-43358.htmlWed, 17 Jun 2026 04:10:52 +0000HIGH 7.5: Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path traversal attacks without authentication, access restricted paths and download system files.