SMA vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20254

Newest CVEs

• CVE-2021-4459

  SMA: Directory Traversal in Sunny Boy <3.10.27.R

  SMA · Boy 3.0

  Medium6.5
• CVE-2025-41685

  SMA: Sunny Portal limited disclosure of personal data of registered users to an authenticated user

  SMA · ennexos.sunnyportal.com

  Medium6.5
• CVE-2025-41645

  SMA: Sunny Portal demo system privilege escalation

  SMA · www.sunnyportal.com

  High8.6
• CVE-2025-0731

  SMA: Sunny Portal Remote Code Execution

  SMA · www.sunnyportal.com

  Medium6.5
• CVE-2024-11025

  SMA: SQL injection in Sunny Central UP

  SMA · Sunny Central SC 1760-US

  Medium5.4
• CVE-2024-1890

  Clickjacking vulnerability in Sunny Webbox

  SMA · Sunny Webbox

  Medium6.4
• CVE-2024-1889

  Cross-Site Request Forgery vulnerability in SMA Cluster Controller

  SMA · SMA Cluster Controller

  High8.8